{ "Event": { "published": true, "date": "2026-03-08", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-08", "timestamp": 1773015324, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "eaf04ce7-d562-4364-a3e0-fc822be46526", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1772928194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772928194, "uuid": "9962ed24-068d-4af9-887a-06aa713d36e1", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772928194, "uuid": "ade8fd74-8d19-43c7-9bf1-1f8b0957f92d", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772928194, "uuid": "65f12df2-da0a-4ae2-b9af-21ca795baac2", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772928194, "uuid": "21b626fe-f8b7-4008-a639-6a8bb0f080dc", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772928194, "uuid": "56f51de4-e550-4ca6-98cf-fa3d9dc19916", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772928671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772928671, "uuid": "fe43a923-ccb1-4155-971a-9265a3f10345", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772928671, "uuid": "b7de14a1-8956-40d6-8e51-1572cf45971a", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772928671, "uuid": "bedea788-e534-4b51-81b2-a19a970ead0f", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772928671, "uuid": "6a6f9024-d426-49c9-b3d9-325d4c7ecc78", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772928671, "uuid": "3dd13ef7-0827-4738-9aad-8d62d0d154ec", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1772931616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772931616, "uuid": "0f8c1fce-a1b0-4083-9f75-35d47b094d35", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772931616, "uuid": "85dfd44e-01f7-4cf9-aa5b-5716bd35324d", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772931616, "uuid": "3f6ea3e3-e251-43b6-b6a8-94a06d1d28c2", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772931616, "uuid": "6ee915d1-f7ae-45b7-b21c-613cf5672f6a", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772931616, "uuid": "65b8eb6d-f74f-43ec-be93-b5655d90dd1d", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8f95ff7-1a91-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772934940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772934940, "uuid": "bb93953e-5b64-4c72-bf49-4fba067d529a", "comment": "Malware payload", "value": "dce45f67bc555c5eced054c96adbce4d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772934940, "uuid": "57ddfd70-fb66-4bd7-873d-771a09c8cb5d", "comment": "Malware payload", "value": "127eb7f546acf5671f6e354e71d94af734c81eac4f647e82d301c7a253d40192", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772934940, "uuid": "6cc03d79-569c-4cfd-8091-ded74067a50c", "value": "T16993093274AF052A166F436E80427B1CEBA982DBC601DBE8F4FD51595FF4D8932672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772934940, "uuid": "b30fac1e-919c-438c-acca-d0b10c77ebf9", "value": "1536:pXyp1xQ/uwMmAIa14oXs/I8epeV7tb73WAxCJCStkb5fvnw05S4jrmiiPsCZKU6i:pisIbzEStkbFvnw05S4jrgPsCZz6Y/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772934940, "uuid": "dd6c2444-13fb-4f67-a79e-137cccc8cdc1", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772934940, "uuid": "a8eb41ad-5f5d-4d9d-b391-3277a37241b9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5277b83-68b5-11ec-9b74-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1772936435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936435, "uuid": "d4e2634e-3237-4063-82d5-fa2aa370e813", "comment": "Malware payload", "value": "05127008ddc73ccf64c067fbf04d56f2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fat1", "colour": "#edd8dd", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "lip124", "colour": "#BBCFE5", "exportable": true, "hide_tag": false }, { "name": "Neconyd", "colour": "#f3f32e", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "rob136", "colour": "#5765b6", "exportable": true, "hide_tag": false }, { "name": "SilentBuilder", "colour": "#708a1e", "exportable": true, "hide_tag": false }, { "name": "tr02", "colour": "#e32a4b", "exportable": true, "hide_tag": false }, { "name": "Trickbot", "colour": "#334db4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936435, "uuid": "1603f3a3-bac3-474e-a3d8-c50645c2447e", "comment": "Malware payload", "value": "f914b9eca1b06fac49b04ddc2c9e24e2832f75f84f97fbc7595e2f9ceaeb5645", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fat1", "colour": "#edd8dd", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "lip124", "colour": "#BBCFE5", "exportable": true, "hide_tag": false }, { "name": "Neconyd", "colour": "#f3f32e", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "rob136", "colour": "#5765b6", "exportable": true, "hide_tag": false }, { "name": "SilentBuilder", "colour": "#708a1e", "exportable": true, "hide_tag": false }, { "name": "tr02", "colour": "#e32a4b", "exportable": true, "hide_tag": false }, { "name": "Trickbot", "colour": "#334db4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936435, "uuid": "82045cab-4d6f-40c9-be25-1a038d5fcb8d", "value": "T1F841B5DAE322A9D9C6B334FA365294C55E53225B8E75CF087E21C07C0089AB496D0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936435, "uuid": "bb62c80f-9418-4c00-9007-d56259fbf9d9", "value": "48:qbUT8PA3RAGvm+SkUpE+lkGekbt0RNEtaq4F0ZnYcowWPa:qwwPcm+xokGekbtCwa33a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772936435, "uuid": "775ee29e-372b-4718-8a01-dbd74d014679", "value": 2367, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936435, "uuid": "df9d1cdb-d58e-4e93-8c31-7d00baae5e76", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "941c8a91-1a96-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772936945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936945, "uuid": "1f5aa193-84e1-47b6-a223-988902276e45", "comment": "Malware payload", "value": "a18f57a56346be725b81f81b8397c1d3", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936945, "uuid": "6e60a66b-60e9-4280-b68e-5ffe97e75d69", "comment": "Malware payload", "value": "51ddd1de77ba5327c14ee70344b0fc2786a4df2ccb76f5608aecd1edd69c7fda", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936945, "uuid": "0fd0f564-d233-47e3-afcd-6330141e3c8f", "value": "T1BF82D0613F2DD2659C9CAA418D8F891B13E0D2D47501E3AACA3CC15C9129575DAA33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936945, "uuid": "858d397a-ac8d-455d-a075-e4fabfce4763", "value": "384:MM9BWkA5WM8Wpwob+yP2JPX35D+uKFzCU24zysDLjavhfKTHIzEGKK6:MKBtAmWpwobzoPzKZ/zZL4fHzEGKv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772936945, "uuid": "d9c5d2c0-0b54-404c-a514-5ae39223f563", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936945, "uuid": "9e24feb2-c6f8-4548-bc52-5e36ea049885", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772937841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772937841, "uuid": "9fdc6517-2913-4083-a111-f7d8b6edb144", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772937841, "uuid": "2b8b20de-3618-4ca1-bb17-3d2b3b8e97dd", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772937841, "uuid": "90b51765-dfc6-4e6c-bc12-ef7997e91b83", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772937841, "uuid": "617111a3-ecaa-4027-a219-3ef3f58e8dc4", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772937841, "uuid": "07403595-9e87-49aa-b12e-aca3975e9100", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0f42a12-1a98-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772937960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772937960, "uuid": "521f515d-9763-4a9d-8b96-615037c12f54", "comment": "Malware payload", "value": "8771041357eab597578a1adc8ee06c9b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772937960, "uuid": "f4450898-73d3-4777-9184-2d159a993a7f", "comment": "Malware payload", "value": "879ddb8e96c198de0b73519a41c5985346d518bd6f6987c8164177f242ef730d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772937960, "uuid": "290c2171-3b99-43bd-8789-c7c79da9ead8", "value": "T1108308327589582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772937960, "uuid": "fc45c628-e1f3-45bf-b736-34b1e295aebd", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnXWagVN/:XEKltp9t2SX/yr2pbXWRVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772937960, "uuid": "e48bfc7d-5eb2-41ef-891e-232ad558a6a8", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772937960, "uuid": "186dbea5-cefb-489a-bc93-2a51a7b5e6d9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "912879c4-1a9b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1772939088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939088, "uuid": "ae161a52-e24d-427f-bc8f-53f78ff73659", "comment": "Malware payload (Smoke Loader)", "value": "d8e3b0ae8e45fbc5896d2cefad4aa1fd", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939088, "uuid": "bb15ffea-9a5d-4f2a-95a9-780ec755c84f", "comment": "Malware payload (Smoke Loader)", "value": "683e24e5ccf6d051ec121496b60703e25b45f59d78cac3be0928d2d4f8a38c98", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939088, "uuid": "28d7c340-e705-4e26-86dd-24d66a1192bf", "value": "T160855C06BCD144B6D4AAE33289A652A6B735F8090B3233D72F916B783F7A3D05E357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939088, "uuid": "ef97cdd8-b58c-4b3a-9c55-b7a3f4623bcf", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939088, "uuid": "b43390be-22ab-4b15-8a64-e422c1138174", "value": "24576:qUKp9guubwCaGY7UIAQ0FGgV7GiWkKXeYlu:qUg91uOGY7pAGaP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772939088, "uuid": "b03e5772-c08b-43a5-9a62-b63b9f504dbe", "value": 1757696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939088, "uuid": "8536cf0f-70ca-45f9-8fa4-2dde7fe0c4ed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c08be344-1a9b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772939167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939167, "uuid": "8814f8cc-ebb9-4693-aa5f-8b90b2665eff", "comment": "Malware payload", "value": "1a85f0751cda584bd3849a950d2c8927", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939167, "uuid": "6ded9104-9538-4ca3-8db9-b7cfafa74186", "comment": "Malware payload", "value": "d3d317c475b29cfe57283eccf037b075964a36982387f54b20a46ebc011a6c2c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939167, "uuid": "c7909fea-ebf5-470d-8048-4c0aab4371fa", "value": "T101C423B7179AB48D7503E3E4814C6D9489AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939167, "uuid": "20a71d3d-f330-4375-8303-3e56f6b7b3b3", "value": "12288:GeElNtIBB2gX3U5TA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezs:GeSIBBfH1m6Jj6ESfUxZ91kmY/9Hew", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772939167, "uuid": "b541625c-da75-4e3c-b0a0-15cd4a66ffd0", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939167, "uuid": "d4038ad4-ae6f-43dc-a454-60fa44dab09e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72bf9d1d-1a9c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772939466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939466, "uuid": "4e854411-4ff0-4589-99ff-55bd2d79ce3f", "comment": "Malware payload", "value": "b0cd0042aed013e0feb80ed7104f3248", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939466, "uuid": "d3167148-34ec-4974-8006-7c45dfbc37ff", "comment": "Malware payload", "value": "e268ca0b499a7d9994b5b0a2b20239d38f0385bcc6388d62abe0044e642357fb", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939466, "uuid": "ce23c28b-9944-4840-a1fe-d8663d9ba76e", "value": "T1C1B423CE5A286CAC5BE85E834F9DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939466, "uuid": "5a2c8304-617f-44c6-990a-75e85dba2453", "value": "12288:BGRl4nbDDGIabs/7iiEVwYg2l3/2NHVy+wK8/:tTabs/7iiWw0KIx/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772939466, "uuid": "b084b429-3bd8-4259-9a82-dd5b5fcd8827", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939466, "uuid": "8d1f6acc-bb7a-4e19-8770-3a9e5637169f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddb080be-1a9c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772939646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939646, "uuid": "9646be89-8439-4f4c-81b5-2c140e266b40", "comment": "Malware payload", "value": "31a3e551ba91c5ac67d5a76ea03b9ba8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939646, "uuid": "ad041cd7-231a-44fd-984d-731a23ffa6ad", "comment": "Malware payload", "value": "1c8c76379d437988521bfcc808cea167459e9f909c7e7f5f1d2c7608dc18e77e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939646, "uuid": "253e952b-354a-42b7-bc50-9ac9a2fa3b6e", "value": "T10FB4230A85D01FFF8A9ECB9946D4A4672FF427952F93565BC0CD20700AEA203D6EFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939646, "uuid": "b97dd575-bc5d-456a-8da9-3cfc36147ec4", "value": "12288:vvOi3UDYXndLQ/jJOjB89RitlR0XjuIkVp69d3iY829uhBzbY7vPpCkID:vWiEGnlQ/jwyil0X7kWv3icYzb9L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772939646, "uuid": "ce8d52ef-8e13-4b52-9480-59e9b04b0a7c", "value": 540419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939646, "uuid": "444e0b7b-aa97-4a39-88b4-00c651f38cae", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9616c7a-1a9d-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772940068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940068, "uuid": "80394a4e-30c6-4ca0-8d13-a3b6fcc88a64", "comment": "Malware payload", "value": "323601477b04d895250631330fd823ec", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940068, "uuid": "e9d1bef2-dda5-4dd8-9a32-be5a498b0330", "comment": "Malware payload", "value": "0929b54c662c19ec85560724b5447832a12ef8e68efb1ed65324c6cbffcd50fb", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940068, "uuid": "57cdf0d8-9077-4ebe-8a85-5ea98a0b7811", "value": "T162C4238BA3FD845390BF1F58AA5BB48D091976F34722DC93146A3313D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940068, "uuid": "3d35553e-2f8e-4694-98df-9d1738e19e6c", "value": "12288:7+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byKH9I1P0QKw6FEk:7+QqldA/TSO713u7xnKH9IaQKH5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772940068, "uuid": "0ea3e8f1-96f0-497d-b146-bc581196b36d", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940068, "uuid": "3ae142d2-ba11-4560-8598-e7414c0f0e0d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d60e6bf4-1a9e-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772940492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940492, "uuid": "855eb138-9bd1-4c65-b350-ee67a5078f0b", "comment": "Malware payload", "value": "ce5e2f6fa0263a05f242c9d46f03df53", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940492, "uuid": "94cda8a0-1f1e-45f4-b120-902737e45965", "comment": "Malware payload", "value": "bfefd26eb8f88f58d62ca3520a22c600eace14a4101a6fb43b654f2a63586bc5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940492, "uuid": "a237856f-7b63-4871-8b3a-611e99ce3b64", "value": "T13A5633687209B1E6F10494FAE6E93C095E2B6DB44F8173D85190F494E0EDB8F16BB1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940492, "uuid": "d732cf0f-db65-467f-a771-836f07723b4c", "value": "4b8ea275b01195301d047f45b8ba14d3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940492, "uuid": "1d77b47b-ba14-4197-bfcf-a1fb49f6f1bc", "value": "196608:lhZryM8MLA8yyh1moJcVvkeymq4O9xSm/pBCPhN:5ryKLA892o0vpu62pBCPhN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772940492, "uuid": "f32cd3f8-2a0c-4bdc-9cb6-6d67bcb432aa", "value": 6301645, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940492, "uuid": "41545a1b-6998-497b-83a2-444ce13586e0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfb295e7-1a9f-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772940911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940911, "uuid": "97918033-f7a4-449c-b60b-eee619319403", "comment": "Malware payload", "value": "5aa6d7a657321958a63a413420ec0324", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940911, "uuid": "4f4fee93-9cdc-4447-883d-bb0ab0c70ed5", "comment": "Malware payload", "value": "aa3111ef4212b3832c396d12af49696104715f5de50bccd4ee92b74a938882da", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940911, "uuid": "5bd00f20-6a0d-4aee-bbea-aaf9570a967e", "value": "T1FBC423692751F0C46206F3FC828CBCD886EF14F98B9315BAC90FA595F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940911, "uuid": "f7e5f52c-e72c-4bf5-a2d6-477ff3d6e887", "value": "12288:GA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWkSFyorOIic/7MP1:Zm6Jj6ESfUxZ91kmY/99z8xFXicTu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772940911, "uuid": "cf6e3c99-c598-4d25-b9a8-9bbfd22a22e0", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940911, "uuid": "31e9fa2b-7345-4594-896c-42585d5e5199", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "398dc94d-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772941088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941088, "uuid": "4161a405-35ef-46f2-9f30-88bd2fb4b413", "comment": "Malware payload", "value": "8abf08b54706f0b75c086150dd7b1336", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941088, "uuid": "5bb8028c-06c0-492f-8a86-124aff4ef5e1", "comment": "Malware payload", "value": "1d273e4e6322db996fd36e1d5b6d62fff18e2ca7f5b355e26de7c82be107a16c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941088, "uuid": "866bffb2-d351-46e2-af3f-1ae21555b17e", "value": "T131C42304340741D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941088, "uuid": "aaf9d15b-1548-4e17-9343-5b11a952b77f", "value": "12288:D6wlOMWROC/FTeHo22Qm7NzofOr68mreA924EwCF:74MQOC/gHozN7NzomW85A9O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772941088, "uuid": "5aa2c4ea-fafa-4662-b95d-cfa3d3838c8f", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941088, "uuid": "81872a0f-7837-4cc3-8fa1-7bbb9c0677be", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3b6f439-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772941266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941266, "uuid": "ea95355c-398b-4526-9b2d-d0a6dfd3e5f5", "comment": "Malware payload", "value": "dcd592f42967292ee4fdb2ceced58431", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941266, "uuid": "e02d7900-df01-4008-a16f-ad977a46a291", "comment": "Malware payload", "value": "b04ae43e9cf4f651a8fa0fd63ed874a10c41fc7c088673061463ecb6fc1ab10c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941266, "uuid": "68a13cbb-58d0-49e9-afba-590adedfb88b", "value": "T1F9C423692795F0C46206F3FC828CBCD886EF14F98B9315BAC90FA545F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941266, "uuid": "a5d2d42e-6a0a-41f3-81bf-fadf1f7f8e14", "value": "12288:AA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWBSFyorOIic/7MPE:rm6Jj6ESfUxZ91kmY/99z8AFXicTP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772941266, "uuid": "fcb44cb1-6928-41c6-99cf-9e1d591c11c8", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941266, "uuid": "eec6beeb-d8a0-4758-bc4f-ebb11863fac2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb5801b2-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772941387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941387, "uuid": "ceba01da-bd31-4828-925c-f9b4ac57b810", "comment": "Malware payload", "value": "b82dd7df0b3bc63456abd3e792e3ad30", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941387, "uuid": "23e7c358-87eb-4293-bf29-da5ef4d5233f", "comment": "Malware payload", "value": "6fb1d6c3c692aaf6f30ff21e089ee407dec2c998327f041b61967beb4d6ab81e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941387, "uuid": "282578e2-96ce-4317-8e67-5c7bca2ed4bb", "value": "T174C42304340641D5835A2B1EAEC4A6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941387, "uuid": "3a007e91-5515-472f-8ce4-77604fa14fb2", "value": "12288:j6wlOMWROC/FTeHo22Qm7NzofOr68mZeA924EwCf:b4MQOC/gHozN7NzomW87A98", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772941387, "uuid": "6ca1c8aa-f847-41ae-9287-3bde02305917", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941387, "uuid": "34c89911-6b30-4725-989b-6e872951b937", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59f30eb6-1aa1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772941572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941572, "uuid": "bd872a4f-6ab4-4ab9-8ac7-2a898559d38f", "comment": "Malware payload", "value": "ed6bad1ef6ffb71b43ce6575c9f1b43f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941572, "uuid": "9c29a213-8d6b-4b83-9899-3a37edcb039f", "comment": "Malware payload", "value": "df728a84dd8d196db4bd156d5faaa9d6f5609ee6df2f402a9bb21e5402f7808d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941572, "uuid": "0cedaa51-cf86-4406-8880-1ad7d441d582", "value": "T1E7C423692751F0C46206F3FC828CBCD886EF14F98B9315BAC90FA595F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941572, "uuid": "6ce2c748-47e5-4cd3-a4c9-feb3eacf35bb", "value": "12288:OA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpW6SFyorOIic/7MPn:Bm6Jj6ESfUxZ91kmY/99z8LFXicTU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772941572, "uuid": "76b12e33-a9db-431c-b1ba-24580990e168", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941572, "uuid": "4e7aa7f7-a5ea-4577-9659-f6385b6a0f15", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e3a9c6d-1aa1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772941687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941687, "uuid": "69740419-416e-4ef6-8748-d457bcd8f2ca", "comment": "Malware payload", "value": "e76b584e9b6939e22211bbda528567ea", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941687, "uuid": "0a5f0d5e-ad23-4206-a413-493fda436676", "comment": "Malware payload", "value": "5baa10b39897e92b04f6c863da8747298157cd1f85393c307b227c2104c90760", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941687, "uuid": "2fabb9e4-ae4c-4a09-b601-67bef4a7b125", "value": "T12FB423CCB6CB88CC55A63134E6A20B4154DBBF33B2DF7391B5B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941687, "uuid": "08c33cd0-e108-49d5-a688-01b9dba13579", "value": "12288:ZwsK8MG1KnyC/G76u6M0gXar5qdutct2ien3P+bet:HKGcGmuwjlQen3Pw8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772941687, "uuid": "0116e797-6b47-4dc4-9339-13afc43d6004", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941687, "uuid": "c9ae8abf-8c02-46cf-bf04-eef0bf9f3595", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5f6a902-1aa1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772941807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941807, "uuid": "90f6d649-b2ab-422b-a7f6-47091211b5ae", "comment": "Malware payload", "value": "7d7eaf25d4daad4a8c7f605d67b1a557", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941807, "uuid": "389e50e8-ecf6-4ccd-bdf4-295cc8bfa143", "comment": "Malware payload", "value": "41ec0b4fd4920a9184391c01e3065204339359b16dfc22dbaa9f187e4f164b7d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941807, "uuid": "64e09764-fabf-4991-a72f-bdbb4b1fe0cd", "value": "T1A0C4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941807, "uuid": "1e26f46e-1fd6-4bab-ad4e-3cd7bae36a40", "value": "12288:FMU+0xq75aS9iYIp6cP/G2Bku8GtNvC28c5/VTUPkYyr:R+J71vI/GIYc5/pL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772941807, "uuid": "9ee6bbb4-9411-4750-8bd2-a456b1efccad", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941807, "uuid": "3106124c-4adc-4de7-8888-db1265c134a8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d4558f0-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772941927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941927, "uuid": "ba1a2b2a-cfe1-415d-83c8-1f76221f6801", "comment": "Malware payload", "value": "04fc4aec9e21a55e464c184a1c52ef40", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941927, "uuid": "6c2284cf-b537-448a-b980-6c13d8d63228", "comment": "Malware payload", "value": "1faa0413274ce5cd2634101ae0a52cc8fb3f8c9c32f99c2880cf3375a0e4f881", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941927, "uuid": "30638eb9-7a31-4e70-94fa-b2ce0dde96d0", "value": "T14BC42367226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941927, "uuid": "bfaeaf12-8fb0-4c59-ba4b-b0536d821d31", "value": "12288:geCEhto9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakM:ntSA/f0Za6TCXKBxl/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772941927, "uuid": "b4a5572a-c669-4cb6-8b25-bdd16794c2c5", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941927, "uuid": "e152b45d-da79-4e29-a1e6-8cb5b507012f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50b18239-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772941986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941986, "uuid": "09a3439d-3215-4914-b128-a695d7c5e545", "comment": "Malware payload", "value": "3acc95da0dafc38ad6e6fbbecb6a8330", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941986, "uuid": "55255f2b-3942-4fbd-9bc3-28190c5888c2", "comment": "Malware payload", "value": "6bcdfcc74edba435bfed6d10f7c8d65a31686edbaf22ab1e5ed6cfa0bdc6d750", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941986, "uuid": "50864a09-36fe-47ef-828e-ef55d0e73b20", "value": "T181C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941986, "uuid": "395ca429-7422-4e38-8205-3b586403972b", "value": "12288:D+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byjH9I1P0QKw6FE3:D+QqldA/TSO713u7xnjH9IaQKHG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772941986, "uuid": "81a44923-a3e0-4da5-a89a-ce301a203ac3", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772941986, "uuid": "0a5d71f8-f7b9-462c-a82b-ecf0d48a14bd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7562b283-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772942048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942048, "uuid": "153e92a5-6a6f-4158-a8c5-a3090757122e", "comment": "Malware payload", "value": "69a20580f88cc8b51fd0293aaa0e5c99", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942048, "uuid": "9a47c27e-89bb-48d8-8723-848e4b48db9e", "comment": "Malware payload", "value": "5e322647e5faee60bd8a43b1421d8ebf197e6e7ebc185a88229cf60df484546c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942048, "uuid": "b028a9b4-8ba7-4abe-ad65-89396c8f41c5", "value": "T1ECC4231DA0547B51F64B6A78B333CDB09B29D03FD219C388A0840B399B5BE5B69CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942048, "uuid": "9b23665d-fcff-4711-bc6c-6996e49c73c4", "value": "12288:0MU+0xq75aS9iYIp6cP/G2Bku6zXL2HXP427bp:Q+J71vI/GzXSftHp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772942048, "uuid": "2a8b3b8e-0c18-4eb1-a23a-ce430c3194ee", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942048, "uuid": "937309cf-2f96-4025-b409-723eac6a8546", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9904a6f2-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772942107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942107, "uuid": "d37cbe3f-486e-48d1-b695-bab3c8224338", "comment": "Malware payload", "value": "3ea32a469e3fde1526bb79b76d5024db", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942107, "uuid": "4e9b0783-f251-47b1-b867-0fbbd1a9eb2d", "comment": "Malware payload", "value": "a9770ed8f110627a12133902bbb5eccdcccfe74d4a5c7b0854e2b28e592a6271", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942107, "uuid": "5b04c496-bd16-417d-a2a4-72f9d881ccd1", "value": "T145C42304340641D5839A2B1EAEC4E6E0BEB560DBFA1CF940AADD7FD06DE96A173C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942107, "uuid": "b006a898-ad18-4ed7-a594-27ffff491603", "value": "12288:n6wlOMWROC/FTeHo22Qm7NzofOr68mmeA924EwCA:/4MQOC/gHozN7NzomW8YA9/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772942107, "uuid": "80d238f8-6569-4552-a32f-21e3c872dff2", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942107, "uuid": "a16b2cb2-4f02-4f54-9e84-ae5f30435e69", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2736de61-1aa3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772942346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942346, "uuid": "7435ccfc-8a67-457b-bc51-104113f5aee3", "comment": "Malware payload", "value": "9c0a03783b4ae41353aba1e5b5b6f882", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942346, "uuid": "2ca5797e-45ac-4128-bd44-29ad17f44050", "comment": "Malware payload", "value": "4e87fe734293a5032e706a18dcf60275401a86af3066563a816360d4192041c9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942346, "uuid": "1c7ea267-32d4-4f1f-b983-6f1b69d29cfa", "value": "T14DC42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942346, "uuid": "c22cf42d-1f8a-456d-8cb9-721710170253", "value": "12288:X6wlOMWROC/FTeHo22Qm7NzofOr68m6eA924EwCk:v4MQOC/gHozN7NzomW8AA9f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772942346, "uuid": "29129f99-a886-4ff3-a3bd-4fd07e43f412", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942346, "uuid": "8fe5622a-2c55-4331-bbfc-c5630fe50ee5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21d45859-1aa4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772942766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942766, "uuid": "5f5a099f-1b26-46bd-8ffc-124cda6ec700", "comment": "Malware payload", "value": "ff92f035ee469d84b327662d82fe17fc", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942766, "uuid": "c3f65b78-7f49-4fee-a356-725ebe36699f", "comment": "Malware payload", "value": "d8d02486ed5c4532291011a918a6ec5a58f6b6cc211d6f4ea4e2c7dfd24e324c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942766, "uuid": "2b415f64-c2a5-430e-91e7-93c5551517c3", "value": "T146C42367226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942766, "uuid": "f4e34027-9883-4a5e-b9bf-45c331265a30", "value": "12288:KeCEhtF9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakH:9tjA/f0Za6TCXKBxlE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772942766, "uuid": "d2341bac-0e55-4a3f-b0dd-b7eb0d2c992a", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942766, "uuid": "a035e1ff-ce1c-4338-b91c-d16f0176fb39", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22067369-1aa4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772942767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942767, "uuid": "c5c11517-2d7c-40cf-aa35-028e7810a3c2", "comment": "Malware payload", "value": "0254466814004d90c759a45a9a2e141d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942767, "uuid": "c1c80310-8ab6-4860-9701-3c81bb241a13", "comment": "Malware payload", "value": "78a38c647d685d69d5bfb6217c372fad05f82a6e77d89fb8dc4244f5f8b8975a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942767, "uuid": "023f4957-4341-42d6-b743-2bb7d110e98d", "value": "T1D8C4231DA0547B51F64B6A78B323CDB08B69D03FD219C388A084073A9B5BE5B69CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942767, "uuid": "521017d9-acca-4dff-8b8a-e45b782beb7b", "value": "12288:mMU+0xq75aS9iYIp6cP/G2Bku6zXLJHXP427bI:W+J71vI/GzXtftHI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772942767, "uuid": "541df3c9-0a25-4832-99bd-a4c4790df294", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772942767, "uuid": "bbfc9bb4-8402-4b5f-a1b9-ba3752564146", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9537be2b-1aab-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772945967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772945967, "uuid": "f3421176-6938-4f66-8d49-fc7f59d523b7", "comment": "Malware payload", "value": "e12cc459a6aefb198bf2818ff87c7f1d", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772945967, "uuid": "29e49b8a-8d3e-46cd-8d6c-c99f03bac853", "comment": "Malware payload", "value": "57f4e110085b3ddf6005c3be16fe4df65ed1ea09121c3869165ffb08f47e87ee", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772945967, "uuid": "f1e80683-9c2c-41b8-b894-2f53c8e131b9", "value": "T167683342C2B51B039EEBCDF1DF255D288F38480775E2F96128F90E93B6C56F49168D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772945967, "uuid": "040b9af3-2746-4be7-8126-1778f51ffc78", "value": "3145728:F83l3+HMHvztDlhO2tu6z7T1mcO2NH9kKfg8Azh5:sfZbNVPT1mcOydk98At5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772945967, "uuid": "f7d24b88-c586-4f18-bc58-44a15574b931", "value": 142764811, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772945967, "uuid": "18908fa7-6aa2-4906-8243-ca389ae4c171", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccb3aaba-1aab-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772946060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946060, "uuid": "8dfeec88-4047-47d1-9dd0-70e767e410ca", "comment": "Malware payload", "value": "2a84a48f8c983e6e3ddc11331b8191bd", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946060, "uuid": "9a421298-19b1-4dd7-9fa3-2a2c92de5153", "comment": "Malware payload", "value": "d1faf8c5780599d009ebb9fd56101ff0bd30cf931ddbe95aec336e66e0fb6f4d", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946060, "uuid": "883d0d0b-aab7-48b4-9bc2-bcfcd4056219", "value": "T1E98833F4C6A91B4ADE8BFB31DE364C112BF5042AA6A3F0715E5E0413EEF7AE1D1142", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946060, "uuid": "63aaa179-2091-4fe6-836f-324c23ccb17f", "value": "3145728:WmcO2NH9kKfg8AzhioD9ZnI05WObS/h+edkvXY6hrhOAouBlaSjhwYoAmS3Ne0ps:WmcOydk98AtbPIzYSoXxLYuBzjhXoAm5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772946060, "uuid": "d73cfbd8-260e-4a64-a91e-23282f59c0c6", "value": 179914417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946060, "uuid": "411c0bbf-247f-42df-a00f-668c8e41bda3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c718501-1aac-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772946247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946247, "uuid": "5a11ec80-27b4-42bf-aefe-2412e0389784", "comment": "Malware payload", "value": "ac9f0d50d9313d25fbc238e251c839d9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946247, "uuid": "96f405aa-1b64-454a-8654-1fe83399c203", "comment": "Malware payload", "value": "e1a0d7c27473ee9646def182d6a0901ab8f27bca6c43961e4c98bde538fe1021", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946247, "uuid": "a573e1c3-a2a8-4d89-9810-610548789aa1", "value": "T1F4B423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946247, "uuid": "ecb73fb1-e135-49cc-b4a4-2b9524fec470", "value": "12288:Xkmht7DrvdyiHCCH1oHF9nJ/qjuyUgoJrrzTPwkd:XkmHzMsH1ELnKUgoJnnJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772946247, "uuid": "9c627784-5751-47af-b81d-d1d546d222f4", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946247, "uuid": "32753c08-d044-4ebb-b1ff-e2f3236ba75d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68046112-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772946367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946367, "uuid": "2b43c248-b98b-4e1e-9010-ee2422045fc8", "comment": "Malware payload", "value": "c4374912473cd42cfe4e1abab51af40e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946367, "uuid": "ad312534-0d58-456e-bcd0-aac486e6f9e1", "comment": "Malware payload", "value": "212c76daf355ede116eb04d4f9d08a112d07940a14dc248bc568ff1ba0a64e18", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946367, "uuid": "a3e25f46-bd80-4ec2-a751-f9f74135c2de", "value": "T13DD4F8B462047880C4AAA7729D74AFA8E23D11A9DFCE3ECC1194FAD01FB37557A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946367, "uuid": "9b5e42ab-3313-4fdd-a88a-7cd4bbcb0db9", "value": "6144:ZJSveutXkgEoCqT2741a3LywBTwjMtxwHVMeOF0buUwKB:qeuhra7T42MMQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772946367, "uuid": "770b2846-f9b2-4111-93c6-e9321817977e", "value": 617316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946367, "uuid": "4554962a-d86f-46ca-a636-db3cee8ed79f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb39fde1-1aac-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772946487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946487, "uuid": "7f9c80c8-4180-424e-8b06-c63d68e3575d", "comment": "Malware payload", "value": "bbbe0b2fed504072aa2ce1c79dfabec9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946487, "uuid": "e75ba313-1bb1-4cea-9fe9-2a2e49aecc10", "comment": "Malware payload", "value": "cede72063ccfaf546fe6636f71a8157e278250a11ab9a69983005f9e4eda7b76", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946487, "uuid": "7384f4a1-5261-4243-b8d5-248607599fa8", "value": "T1AEC423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA545F456267BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946487, "uuid": "e314e10c-3eed-47f9-b078-c01ffcd849b0", "value": "12288:UA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWJSFyorOIic/7MPE:/m6Jj6ESfUxZ91kmY/99z84FXicTb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772946487, "uuid": "1a102903-f8db-49e7-a3a1-659d5a45f3e7", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946487, "uuid": "98046176-4703-4407-a3e8-2546e3ee8739", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c621ae4a-1aad-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772946908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946908, "uuid": "bfa3060a-3413-4186-b3a6-493ddc0e9908", "comment": "Malware payload", "value": "6f31a4fa3188506cbfc760c4f8583d77", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946908, "uuid": "26ed38df-5016-49b3-8fee-ca1019bc80cd", "comment": "Malware payload", "value": "f8902dc8d110b7047eba45a8b727764e561db474b7d2d73a67b989d45f11ed35", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946908, "uuid": "3b556b5e-4058-49ce-aaa0-39a39a79a261", "value": "T153B4231EF4D078CFD68ACDA394292C785F6C96C9CD126B7246C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946908, "uuid": "de4efe33-2688-4523-92b8-96d5df45ca4d", "value": "12288:BTibgSMFBOBSlqr5Ku7FxPbzJTVBU+8JM9hAC8Z3cVOBRkbKQDiUbpKQ:IcSMFYLKkxpTKJM9mCw3cVOMWAPbp7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772946908, "uuid": "0236fbc0-8800-49e7-b2a4-0b3a6305eadd", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946908, "uuid": "87e5ea13-5aac-4947-94ef-0dd3e57b5745", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "462a8ec7-1ab1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772948411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948411, "uuid": "3bf719d0-9a6f-4082-921b-577b3f6e0fc2", "comment": "Malware payload", "value": "33797ff7cdca9d79adaf0da13ec5ff93", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948411, "uuid": "fb64e908-7a2d-437d-9aaa-f0e3a923aa55", "comment": "Malware payload", "value": "d605cd9d2c4da97e3662db61cba4ba471400e3e2c2c4f36297aacb6f2b7db22d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772948411, "uuid": "e9c892bf-d3cd-4777-abfd-1ff6beb870f9", "value": "T1C7C42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7FD06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772948411, "uuid": "d8d413f9-98d4-4c17-b39f-1ff90d4f0c77", "value": "12288:H6wlOMWROC/FTeHo22Qm7NzofOr68mKeA924EwCM:f4MQOC/gHozN7NzomW8oA9f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772948411, "uuid": "c76bbd03-d653-4040-be54-344dc85acabe", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772948411, "uuid": "3e0cd304-db0f-4f9e-a9c1-73df955ef534", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d26f187d-1ab1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772948646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948646, "uuid": "ce6b073c-4f97-4d9f-88a9-837ea4a684eb", "comment": "Malware payload", "value": "c859f77a6ac86a5fd0ae4df37554846f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948646, "uuid": "fb2f8fdc-d0c0-460f-ab14-6ca02fd771dc", "comment": "Malware payload", "value": "39bd5ad63483e29c89ead628d531d0771c1cb7850b615f0de4b31f9ec93afb63", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772948646, "uuid": "feb12446-6f1d-4f2f-b554-013cb445fed3", "value": "T180C4231DA0547B51F64B6A78B323CDB08B29D03FD219C388A0840B399B5BE5B69CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772948646, "uuid": "e8904db0-546f-4971-b978-d669069c8803", "value": "12288:2MU+0xq75aS9iYIp6cP/G2Bku6zXLfHXP427ba:m+J71vI/GzX7ftHa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772948646, "uuid": "56b798b5-0254-4945-9ebd-f6b021ed4b53", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772948646, "uuid": "b3a0444f-88dd-4024-bd6c-d44d303991ab", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bc7ced8-d7ce-11f0-b111-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772948914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948914, "uuid": "61d7e3ea-d660-4688-bf33-4d7bc162fa2b", "comment": "Malware payload (RemcosRAT)", "value": "431da47a6b8e30bd7d01fd28fae83cbc", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948914, "uuid": "a554e480-b3a9-4a63-a8b0-de0eb8184927", "comment": "Malware payload (RemcosRAT)", "value": "8fb876fd7e52699fe2c6f1bbc8e70552e06eddd813e9e5ce165fea3d6c354c9f", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772948914, "uuid": "f780d339-e1fe-456c-b5d4-cddaa35e14df", "value": "T1621121CB49B61601B2C140547EA733922A94562B810AC560B10CB099DFC9F2E86E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772948914, "uuid": "4c8f742e-d896-4366-9a9a-d53f7aec5682", "value": "12:F6QclfhE0evXSJ+kJAxmkNjkYkRgHe8dLN3DHgXocB14zSvudJBr4olf4x7RHts8:FspENMgYgFNMNBqzSv3olfALs1BzU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772948914, "uuid": "66670910-3e6f-460b-af11-99d7c8662307", "value": 988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772948914, "uuid": "c0af81a9-77a0-4e74-9acd-039da42124c5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5b32d99-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772954235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "d23d81d8-046c-4fff-891d-04fe71d96075", "comment": "Malware payload (Mirai)", "value": "2da9c2b10ee7df3f9ec8e2579521e28a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "da4b57ce-dd69-49f5-bda0-320a7db7f2f7", "comment": "Malware payload (Mirai)", "value": "881266a03eb3331d0dbc10bfd4a0db2fe9fb272437bd29b74f37de9fd15ca2b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "11f7f3cb-36d9-4042-ada9-284ffe1e706e", "value": "T144D35B0673180E17C5E349B02A3F17E483FEE5D121F4BA89691F9B6A4672E771482F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "e65bf439-9ced-418a-b445-ff6d53aa23f8", "value": "3072:oWGIf1/UwfhJdU80rdtbYUaDGMsMA9TKHt:oWxN/UUDGjbYUaiMsMApKHt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772954235, "uuid": "bb610b0b-79ee-4ed7-832f-a0f87ea395a9", "value": 134840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "af297f5e-6b63-46d1-96ca-f5d31a75537a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5b53c26-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772954235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "ace16923-8d88-4200-bc63-d3c53cbdb567", "comment": "Malware payload (Mirai)", "value": "a06f2d8af4c103aa29baecce9a0e7663", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "9b3c5ffd-84e9-4621-a9cc-1fbaabd18efd", "comment": "Malware payload (Mirai)", "value": "201c85fc60e8d8bd887ff85c8e5fee55ec7536b058c0459e5cb8f4bbee9468a9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "d619200f-9a37-4eb1-9ac2-b8c55899a11b", "value": "T1F9344B45FA418A13C4D217BAF9AF414A3332A795D3DB730699286FB43B837AF0D676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "6bac55eb-14bc-4fa0-86c3-ab3599624c1e", "value": "6144:8KbtT30y9azauKacEK1dAnJd7LTfdfM/9hVdAU:8Qx0EazauKacE62JVB0/HJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772954235, "uuid": "a34190fd-aa94-40ed-891a-eeaf722aef99", "value": 231680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "ccbd31c2-35e9-4afb-afbe-816e030fe52a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5b57aa4-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772954235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "e3afc6f5-d20d-4de3-b18a-e0485eb0a03f", "comment": "Malware payload (Mirai)", "value": "f97255bf0c03405a9e16c448748b0ff5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "07919da0-d776-4aa9-9ce6-0fe87d66382d", "comment": "Malware payload (Mirai)", "value": "19c0cebbd206bfc40bf8eb9cee193fb126430960cf4cb06f7dc3ce29e74a8145", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "dba78aa2-c6e3-4f0d-a8cf-f0a52876ffa8", "value": "T140E35D8AF4029E7DFD4FE5BE44670D09E931A39131830B2A53DBFDA3A9311A94D17E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "600446e6-0454-4133-a148-170cc618132b", "value": "3072:7oDlIyA+oy+ZGiTP/lZoEhH5lgLOoe97dlJ8jf4:1Dy+ZGJEFxoe918jf4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772954235, "uuid": "2d9e5e29-28ef-43bf-876e-f80467e18e34", "value": 147336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "a904790e-1028-470a-818f-fd33775baad4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5b5d8e3-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772954235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "14e7e305-93ac-4e65-8e33-9edd062d33b8", "comment": "Malware payload (Mirai)", "value": "6d14ac7951e8b4a4f059d97ff0470ca4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "fa040d04-48e5-47f5-8999-4ccee15c4154", "comment": "Malware payload (Mirai)", "value": "a97ec3794ee02e8c9a22d872152f276274237d11cf132cdab2fa346167bf815f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "755bdaf9-31d9-4ec5-9a9b-5a933c72d297", "value": "T18693D551BC82562BC5E023BAA67E668D336473E4C2CF722BC8214B257BC561F0C63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "0e34ae59-26a8-4c88-807e-ba3b101f392f", "value": "1536:cd+6IHbLrKZe7C6a4m2qiLM3ZO+XC2zsethxAqrr8GQ:2+6cLrGoL+DhxA+jQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772954235, "uuid": "f2601442-8e53-4d39-a7ba-894b2d1b214f", "value": 95720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "d9d6f3b9-3d52-49f2-ab60-97eb3e4fdd4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5bcbdd2-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772954235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "d858d9c3-a377-4e80-928d-3942a1950498", "comment": "Malware payload (Mirai)", "value": "6f651ac6b25278b87f6698abd1a7684d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "db11ff1c-1a20-4d30-993a-0bf467d7f510", "comment": "Malware payload (Mirai)", "value": "ba0aae542414c20619e72b7e2f82d9269d1bee955b93318cc942684358637b24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "abea29bc-591d-4a65-a2be-6b74647e4279", "value": "T18704B50E6E198F7CF79987345BB79E31925833872AE1C582E1ACD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "502f7a76-1ed0-4fda-a4c5-356b23e3d0fc", "value": "3072:1OATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/QBrj4jTv3TcJ2tD2Z:1OATXjpCgqDJHDexBJKfjPV4kuMu8hJE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772954235, "uuid": "adfad634-737c-42a7-b693-6a052b19e63e", "value": 175820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "2a24e279-1f8c-43d4-b171-bb3d5b03b32c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5bfef0e-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772954235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "c68c0bd1-0efa-4da6-a30d-c9615aa8d266", "comment": "Malware payload (Mirai)", "value": "7db551c272e224f7c1180b90b651311c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954235, "uuid": "5d15072e-5c2e-4d23-ad1d-1c4036435278", "comment": "Malware payload (Mirai)", "value": "0022b8de27d1a1cdc91f3ba895f261023d597c9a2617131f89ce13d93e29e309", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "4a5232e5-752b-4e7e-b9d0-982f7cfd1953", "value": "T1E2E34A55B8828A22C9D513BEF92E018E331327A8E2DF7213DD215F2577C792B0D77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "08766a4a-ea14-4874-ab64-aaf0c3a9bafe", "value": "3072:GRp26H+t6SCysDD4D6Ie1k6aUfzL6EiueCo2kSa:m26et6SCHDDceS6aGIueckS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772954235, "uuid": "0ff0236c-0353-409b-a100-12cefaa5c1fd", "value": 146272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954235, "uuid": "502d91d1-fead-4a77-8b06-027f3ba26867", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fccf8a90-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772954301, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954301, "uuid": "f7b2b1b2-d966-4607-9ceb-00c11e2806dc", "comment": "Malware payload (Mirai)", "value": "acd2f4c184bb17f369dd292db02d65b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954301, "uuid": "0169775e-e30b-4409-aff3-d025ad41ce11", "comment": "Malware payload (Mirai)", "value": "be2f466f6f56e69a50dfd5d93c5baae9762201baa72fc1d9274cc6eb61323672", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954301, "uuid": "43159338-0880-4046-91bb-420f1cbfb0c4", "value": "T1C6B339C0EA47D4F5DD1642302277F73B9A32F17A1139DA83E3A89F327C52A41D90A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954301, "uuid": "3ecf2361-0f6e-4307-b0cc-f7b9341365f1", "value": "3072:XFmzGpEWmXBLFkpzjYS3Z/5+JcDEh3ohHw0pJbLB:XFmzY5mXBypzjYYZ/5+JilHLB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772954301, "uuid": "f99fc1f2-98a0-4ee6-a709-b5c3583cff32", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954301, "uuid": "7588210f-fe99-4809-a76e-17be5932843d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcd3be3d-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772954301, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954301, "uuid": "8c7fb898-2f49-4eb1-865e-b45b010e2be1", "comment": "Malware payload (Mirai)", "value": "dd30bf096c337e47e256d3f7f788d42f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954301, "uuid": "547b2cb0-7d6c-486c-acd5-db89d8a6056f", "comment": "Malware payload (Mirai)", "value": "e14a3f2ffb3bab0d5358536f09b90d39899718ee9f24799f4e240b312c8ca33a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954301, "uuid": "7f90026d-3a9e-48b9-939c-5c2a8f5723ec", "value": "T1C6C3AE73D42A7EC4D1514034B8B5FEB51B61A5C041935EBB26E9C87A00CBEA4FA0AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954301, "uuid": "0b1e6cd2-e8e6-4658-b613-210ae81730c4", "value": "3072:hfpZykqkt436I+9eIHimNOkSMPXeC4GnHW:hRZ0F3Bc1NOkvZhnHW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772954301, "uuid": "3f4dae16-96e9-47c4-ae90-43adede7a2d7", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954301, "uuid": "47971cf3-03dd-4989-ba63-5b22fa9580b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e19e79b-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772955189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955189, "uuid": "7bdb3cd5-d1ea-4657-a927-030d7427423c", "comment": "Malware payload", "value": "b74f3f0fe11891147a38fe21c3d47865", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955189, "uuid": "f54fdf5a-e34b-4447-9212-ba8324cdab13", "comment": "Malware payload", "value": "b3029c856f9aa918a8af2c662cb9d86e1e182be074dbd655808f591402c788b7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955189, "uuid": "e5e74f23-709e-42d6-975e-58289b9764d7", "value": "T1A9C49F7B43B25C2E5D7D0A45E43417D03CA94ED7DAB0D1AA3A8270B092FA4605BBF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955189, "uuid": "c10f4157-81cd-4a37-94a2-c00e888e0520", "value": "12288:tuE9WjAEAYYOVPichabAxxnk8jotP62WoQGv2wAahZ1DIYM7dy7FkU8V:kEKic+Axxnk8jotP6H/42ZM4pk7F+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772955189, "uuid": "48d48c9c-a33c-47da-9123-82d77419fd47", "value": 584530, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955189, "uuid": "81252a59-e22f-42dd-b95f-4a74186862c1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5582cde-17ab-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772955314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955314, "uuid": "339f69bc-e086-4373-9a69-3839e30023e7", "comment": "Malware payload", "value": "ce11fe3bd4315246a6245ad326d7f816", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955314, "uuid": "c6a7778c-419d-46cf-b7fe-1937198ef226", "comment": "Malware payload", "value": "a945e648556cb1ef96710cd1682c9bb989dcfa4809dd7f84f31413aeb87f144a", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955314, "uuid": "d967cce7-9dd5-475f-b9ee-ffd534fd78b0", "value": "T19807E66B24DF59AAC3EF564149B22F1871B47712AC170A3BA1BE75C79B713B80803F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955314, "uuid": "7ed73a4d-20c7-4e29-866c-cbcc9c4b1935", "value": "49152:8UixbItdTrJoFVPMvXGw9Z4YrArVd1fCo1beULmi+VrKct/7PSBPy25NR6M0/fcg:7iBI/JoFdMPGY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772955314, "uuid": "5c9f1d20-c2d4-46e9-b621-73f8447e297e", "value": 16837457, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955314, "uuid": "838e231f-e8e1-4590-806a-5e55bdaef9a9", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58a825d7-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772955314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955314, "uuid": "e19654ba-c703-4926-b76a-d74cb7096f2d", "comment": "Malware payload", "value": "a9eee1984a1074e5774b6ccc4b62c84a", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955314, "uuid": "16b1891a-91d3-40c8-a1b0-971b8b248083", "comment": "Malware payload", "value": "65123f6bd4eabc09017f8eb29b1e014acac4ed562002779b74ec6ae07ebd3388", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955314, "uuid": "1e34d339-1f9d-407c-897b-3012cdd39cbf", "value": "T1FAA527E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955314, "uuid": "33edf9e0-98f9-4bc4-bb6f-16dd51a3d239", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTA:m0eF4xaDjDONijDG8ZxFTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772955314, "uuid": "7100d7a1-8a65-47cf-8bae-a6170cd775e4", "value": 2151302, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955314, "uuid": "57303c2d-be0c-408e-bec0-fa48090cdb20", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7abb11b6-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772955371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955371, "uuid": "abe82150-9ef4-4fbb-9dd4-d339a4c0ad8f", "comment": "Malware payload", "value": "1364a0a0593d3d3a51251f6a5acaee61", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955371, "uuid": "afa7dd0e-b379-400e-a615-0d50798f84ae", "comment": "Malware payload", "value": "ad7f5cdc0d55732b1d95bbde985fa72e6ff57eae07e514fe6f07e694b965b750", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955371, "uuid": "3c818185-5e8a-47bf-98c1-d85378d2a883", "value": "T1B0A527E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955371, "uuid": "4b89c839-6bbf-4744-b441-460820857405", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTT:m0eF4xaDjDONijDG8ZxFTT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772955371, "uuid": "06865612-0c70-4fca-9813-a318de9661cd", "value": 2151316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955371, "uuid": "0fb992b7-7aec-4656-9016-968f40114e44", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c01a19b0-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772955487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955487, "uuid": "7d9f6558-560f-4d50-9cee-57867f86f6c0", "comment": "Malware payload", "value": "d001173b7b61e28bb1bd38b27c2a39d2", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955487, "uuid": "991eb13d-e448-4ae4-b3ee-8544f9272487", "comment": "Malware payload", "value": "bac6ef4fbe87bdc3fbcb28dc8e409c34ccf9e050bb08b8f25f5fec59f0c2785c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955487, "uuid": "a02d990f-9c2f-4358-9506-1937047e74e0", "value": "T118058CBB4372CE9E1F6D1FA49504068DAC68D897E5EC03FC2F439C7582F65805868A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955487, "uuid": "ca6337a9-62f5-45ad-b0d6-bcaaedda417e", "value": "24576:zXSkhkqqGd1dT8K78xyuOZDiNgFbM7f8ZsRr:zXd1E6iMs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772955487, "uuid": "2a8ff650-bb0b-48ca-8645-255203bfb638", "value": 865320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955487, "uuid": "1c567370-36f1-4934-9318-6f70f140d063", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c38d0df1-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772955493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955493, "uuid": "4dfbe18a-a21f-4421-a6da-5b81b7b7b904", "comment": "Malware payload", "value": "3a046301b0dac4e8d49a6524bebc3b81", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955493, "uuid": "0c4eb77c-79bc-4c98-940a-bc2b2e21ccbb", "comment": "Malware payload", "value": "9db38577a28b6217bc8225534aa22be7a56164dc3c03b021bde694256e90a062", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955493, "uuid": "fe35a723-ddb4-41c7-891b-45ca3d164fbc", "value": "T1C3D56BA688B1BF13B7BA8E4873341E5D101426370FCB150AB4BED7C67683A75346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955493, "uuid": "7c04b836-cace-4f18-9637-0f178ba52abf", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTDhvFRBW84FMotS:m0eF4xaDjDONijDG8ZxFT3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772955493, "uuid": "2be72fd3-950c-4469-8a19-5b6b84f74e1d", "value": 3000816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955493, "uuid": "6f49b00e-a762-4107-b224-c10d28989159", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fdc6512-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772955675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955675, "uuid": "583f034e-3f6e-419d-bdc5-42f389353de5", "comment": "Malware payload", "value": "3d9679465503be27dc2d4c5e7df71177", "object_relation": "md5", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955675, "uuid": "72c5535b-fcc4-46fd-8e97-409b861cc9ca", "comment": "Malware payload", "value": "6b90a0f2d3ea77fbe2365318473a4b73ca131ac6d5a5eca2d2bc1bc73ebf044f", "object_relation": "sha256", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955675, "uuid": "91ab59e7-b384-4dc3-82fd-94506b72188c", "value": "T18AC53AE694A1BF12B7F65E0863741D5D212426370F8B050AB4FEC7C6BA879B5342F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955675, "uuid": "729e5bd8-9a19-46b2-8a2d-0c7f0c3c4411", "value": "49152:vxicL40abm/bWgTYOfNbSAr44CM9i/oq5VdU4K:pi30aMWIYMmAE4CM9iVdU9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772955675, "uuid": "a5444ed5-99e2-4958-a644-6f1aeb67cd60", "value": 2627388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955675, "uuid": "5660ee31-9fff-4f61-83ae-ac05461b341b", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23bf3ea4-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772956514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956514, "uuid": "e84c3148-2b5a-47b3-ac7d-e232bcfb1b0e", "comment": "Malware payload", "value": "2989f6eff0302e3c90a7b0f8e24c423a", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956514, "uuid": "551d45d7-01ad-4d4d-af2a-a4ceda059566", "comment": "Malware payload", "value": "d85a66aaa6ace1eb4f62f671cf4ae1c43d06e23e125833455b1724747270b985", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956514, "uuid": "521657d1-dcd0-4a7d-9473-a8edb65ea322", "value": "T13AC529F698A5BF23B7B64E0863702F99501412370F8B015AB5FEC3C5E6939B9346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956514, "uuid": "6116c345-13a0-4e23-a546-004136a609ab", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTJ/ypr8d7:m0eF4xaDjDONijDG8ZxFT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772956514, "uuid": "19fc7701-36e9-4738-aafd-546ba43dbea4", "value": 2628644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956514, "uuid": "da0694e3-27b6-4e0a-819c-809d2776553e", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "377b83bd-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772956547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956547, "uuid": "ecaa5ee5-b702-4b4b-af2b-45235e18a832", "comment": "Malware payload (Mirai)", "value": "6e3301f8ed191bea643451aaa0cb4fbc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956547, "uuid": "8045edf1-a1a8-441f-99d4-241e1f2992ec", "comment": "Malware payload (Mirai)", "value": "d4aa597fd792aecd88f5cbfe1491efa5d14e5caa86a80eed93d8c4800c6ade16", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956547, "uuid": "a977f3dc-7475-4632-a8d2-87bdf910e67c", "value": "T1BBB32A4AF9819B12D5DA22BEFA1E518D336347B8D3EE3202DD149F2437CA96B0E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956547, "uuid": "4c9b2ad6-0656-436b-af90-b5f81709fd67", "value": "3072:RHmNqWGMsBtQ7hHdBLP5EqQaUitsbUpsHLGXwCL/JEf:RssBChHdBP5RQaUitsbUKHjCM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772956547, "uuid": "d941791e-e6c0-4ebf-b56f-d58ec56a4d6e", "value": 108676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956547, "uuid": "e3ba6ab2-8ab3-4462-b313-1e134ab73471", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "449ae5e9-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772956569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956569, "uuid": "bebe1bb9-304a-46c8-bd20-99de29669f20", "comment": "Malware payload", "value": "5c0a417f11403871b0c724649f727bbd", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956569, "uuid": "2c1ab105-581f-490c-948d-cfa9c492ed0c", "comment": "Malware payload", "value": "f5c091582c1874263872e19e286334049add647adfa4c06b1228f04c5bfe8a41", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956569, "uuid": "98b4bd52-a4f1-4863-967b-b5fae195ee69", "value": "T138C529F698A5BF23B7B64E0863702F99501412370F8B015AB5FEC3C5E6939B9346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956569, "uuid": "2e6021ef-be43-482f-be90-adb581db8002", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTOd5ipVr:m0eF4xaDjDONijDG8ZxFTv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772956569, "uuid": "97ae768d-a4bd-4f37-a240-fd5284a3bd58", "value": 2628504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956569, "uuid": "4038614d-a4f0-4d14-9766-00f71f6438d8", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44ba1726-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772956569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956569, "uuid": "aa924266-9682-4bab-b6e0-81f843c6b995", "comment": "Malware payload", "value": "1fa5ce3549393f86a5bf4bfa28b8fd14", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956569, "uuid": "58f50d75-7aca-43e0-a510-87e5d8779c87", "comment": "Malware payload", "value": "2633809991b0672f1b038f441bad192617f9bf7eede901cc988a8507b234b3f9", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956569, "uuid": "7c79d787-b8aa-42f8-b472-0f96c738ac6c", "value": "T1A1C529F698A5BF23B7B64E0863702F99501412370F8B015AB5FEC3C5E6939B9346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956569, "uuid": "484b2aed-93c4-4aa7-88ab-0275ddb47a02", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFT80hDa0:m0eF4xaDjDONijDG8ZxFTR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772956569, "uuid": "19a5a5df-63a1-4256-92b3-142d919e6e64", "value": 2628724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956569, "uuid": "945f07a0-c9ae-49ba-8f4d-e81d4cd3c510", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44e9651d-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772956569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956569, "uuid": "d249e45b-fb0b-4d54-b7f9-4130b914e0c9", "comment": "Malware payload", "value": "e19faba28a79ffdc4694337d83fbc368", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956569, "uuid": "387126d1-1b80-43e3-9977-e0247bd1621b", "comment": "Malware payload", "value": "8021489392aa1333ab4df792d9e23bf278f0c9c48a317cda1d6ece6209101328", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956569, "uuid": "7aa851ee-5fa3-4955-b216-bf74feb3b630", "value": "T109C529F698A5BF23B7B64E0863702F99501412370F8B015AB5FEC3C5E6939B9346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956569, "uuid": "a8b91d40-0c0a-4ea8-9d66-f1d18ec6bd40", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTJ/yp6p7h:m0eF4xaDjDONijDG8ZxFT3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772956569, "uuid": "36d837fd-8c45-4fbd-bba2-47d164007f36", "value": 2628560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956569, "uuid": "23dc2332-8422-4473-952e-eb1b3b863d23", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46e5f4e5-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772956573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956573, "uuid": "a587e048-a39c-4a84-bc8a-da5e13340ead", "comment": "Malware payload", "value": "890c1eb83a871678cd6a38cce6914b69", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956573, "uuid": "81530ec9-01b7-4cde-90d1-d333f48f1439", "comment": "Malware payload", "value": "56f3b65fb51b256760b5364fc95812ca74b2cb5e6eb31bad7a97e88882faf1e7", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956573, "uuid": "56fdc780-fa65-4cd2-a540-c2f9f96ac09a", "value": "T1D3C529F698A5BF23B7B64E0863702F99501412370F8B015AB5FEC3C5E6939B9346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956573, "uuid": "522bc137-3548-4869-8855-54b7ae5de2c4", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFT80Cdjb:m0eF4xaDjDONijDG8ZxFTY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772956573, "uuid": "b3086d60-cdf2-4303-b5f4-d868f0b130fa", "value": 2628622, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956573, "uuid": "ccbca868-95cb-43f2-8177-33cd4a1d070c", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b8fd0f7-1ac9-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772958620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772958620, "uuid": "d880c49e-eac7-48f2-b8a8-d1868cb3ffc8", "comment": "Malware payload", "value": "c662b06ee2ff56c0ec101e9ad1287661", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772958620, "uuid": "f4b63385-ae16-422e-9c6c-4abef7abf909", "comment": "Malware payload", "value": "ba5de2090a7c5b9e3f770e05f56306c891760be02233c90a183896163ab3bfe4", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772958620, "uuid": "f93885c8-2ee8-4777-9922-72641100a641", "value": "T128F2AD946380D40366CE4F93BF12BDE9E42BA87679C8A44796547FAC68B8507C2F4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772958620, "uuid": "fc3fe198-4679-42ae-972d-635a37aa35c0", "value": "768:kznA+DfdaqtnTyF8BPWUJ8quL+3o8bJ70aQ5w+z400:kz4S8d8bJC5RC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772958620, "uuid": "974b684f-d8bf-4d41-98e2-5f9305d29576", "value": 35842, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772958620, "uuid": "02f30d73-e207-453d-853d-15a71bebe658", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f937b8d4-1acc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1772960308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772960308, "uuid": "09483587-4749-480c-b6ff-6afd121beb6b", "comment": "Malware payload (Metasploit)", "value": "48d1a236d28cafa52ac65bc8ebae3a2b", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772960308, "uuid": "1308bcd5-a939-4278-b033-9ee6e9421ded", "comment": "Malware payload (Metasploit)", "value": "85835d3c2dcd78eb71b1f13c03ed8cf1e6bb73ab336aa395b16f771d6e14d09c", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772960308, "uuid": "55061f52-b7d8-40db-97ba-4ef20df8aac3", "value": "T16DA1D9383AAF5A484CC30067BDB2A4C9AD442BB6D5EA6C00F0D5C055FDEF615C23BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772960308, "uuid": "c9951497-d9d5-4615-82de-6b28afdb4161", "value": "96:Q5g9d+FvvOmLmbMslf84D0lE0lLZ80lO0l60lXeOKPk9:HEvOfbMsOrXhd1xNKPs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772960308, "uuid": "322e41c8-2347-4c52-b6a6-f87c2016b161", "value": 4672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772960308, "uuid": "f07e985b-80f2-4f80-91f8-4da80348da10", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d597c2dc-1ace-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1772961107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772961107, "uuid": "cee703a5-041a-4c8b-9e6c-0b10235ff61e", "comment": "Malware payload (Amadey)", "value": "745930fe627c6a146d38716f6b0472bb", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772961107, "uuid": "84a3f5bc-0f28-465b-b1c5-0f9856784956", "comment": "Malware payload (Amadey)", "value": "cca62534201d187235527715f648522a29d6cfdbf8ba26952267734762d0b83f", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772961107, "uuid": "6bde5e8d-358b-436f-963a-4f9bc39957be", "value": "T159A45B217926C032D66292711E79FFF584BDB8259F7109DF77C00E7699202E26A31F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772961107, "uuid": "9a6fe2f4-37fc-4fdb-9a01-fc5ccce867ed", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772961107, "uuid": "2cff84f0-1ecf-4468-bd1c-2a83d298ce1f", "value": "6144:tb1HF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fms4AOk:fHF0VKkWrb4QDwR4QWdyzsAlWZBR8qM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772961107, "uuid": "164f26c3-1d52-433c-a26e-701c88d88725", "value": 453120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772961107, "uuid": "e2c4e0ad-d88f-4953-8ab1-da3bdcf8716c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "321447ad-1ad2-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772962551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772962551, "uuid": "3a9df4b5-1848-46f6-bd11-e7567769c8f2", "comment": "Malware payload", "value": "affbb0a9485bc47798c6b1d9ccb6ba64", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772962551, "uuid": "2355d3d2-674a-40d3-91b2-c8fa6d74abd3", "comment": "Malware payload", "value": "6992165906f39e8d2fb4eb0dd55d3f88c4864d1b54de715190593dccf3c10e85", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772962551, "uuid": "12e554a2-e21d-439c-9c31-f5e97289dc20", "value": "T1557533E0C5432DA7A5BE8325B098CB8F8BEF55139FE513D6BA22B0F11A9D131EDD81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772962551, "uuid": "3d513079-2264-4858-9447-0ab4939c7ddd", "value": "49152:4DToHh76wRcDQxXrKQfSUttYUWrivmX8lBCML:4f2JJ6QZ7fSstSrivm+BCa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772962551, "uuid": "e4534965-d6e7-4e0d-b106-5b198c5dd037", "value": 1688983, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772962551, "uuid": "640a9c34-7c81-4b38-aa4e-955331820e9e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cfecf55-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772963052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963052, "uuid": "fe12d1e1-e3ba-4d82-a60a-a3d9910baab3", "comment": "Malware payload", "value": "d33529f0bfb0a5f962e263ab9658f61b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963052, "uuid": "1815f627-f883-4535-9d7c-1b9c7e6d085d", "comment": "Malware payload", "value": "263edfb3434c402aa5766369724343081f997b27f7b6aadf581003753b2dcd8c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963052, "uuid": "1d104e22-5ffd-48c0-87fb-944b8b128fee", "value": "T11D56CE11A7419439F4E304B28A7DF2AEA968BF31071651C7A2CC3D9D9AB4AF23D317", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963052, "uuid": "03c17de9-98a3-468a-b721-80f491db6b62", "value": "6b2179c3562d13ffc88ec65e11e4495d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963052, "uuid": "7d5b32dd-1403-4668-b082-9821732d7b0f", "value": "98304:sZQIM+/nv/CDoAkYwpAa5ge1zZ/jtdZwUkQ:AJCKlA2VKUz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963052, "uuid": "7fa524a4-37d9-43f4-8b10-e03a1301736c", "value": 6365288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963052, "uuid": "5c1fb04a-74ce-4bd2-b69a-21c51060b724", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ec154fe-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1772963055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963055, "uuid": "8134b2c2-6693-402c-aabd-3be048a2a49f", "comment": "Malware payload (njrat)", "value": "6f48cd1f2fc855c7730045dfd24c7bd9", "object_relation": "md5", "Tag": [ { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963055, "uuid": "4b4e9607-aef2-4ef9-9689-eadd6a84995e", "comment": "Malware payload (njrat)", "value": "f9b9dd7699d55ab0bd3a6ea4528f7f83b3f47857dc00153f0a388bd3dcee09e1", "object_relation": "sha256", "Tag": [ { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963055, "uuid": "912779c7-03cd-49fa-9144-1b3f55fab4fd", "value": "T15F06BC9D765072DFC85BC472DEA81CA4EB5074BB831B9203A06716ED9E4D99BCF180", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963055, "uuid": "1ccdb6ab-c12d-4a14-9f98-3e11c38dea18", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963055, "uuid": "34c8da7d-caad-4442-a039-a0eafd6e4646", "value": "24576:azH5uO/YzLEnxMWfV2DzTDNfB1v3Q3ISwtniykR4n0X9IBMuoJ6IUjW:KZVQzIn2WE/DBU6WR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963055, "uuid": "561f93e2-8cfe-4a36-94bb-8ec4f2c96093", "value": 3956224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963055, "uuid": "7734c113-d3e0-41c4-97d9-cbbf02f8c2b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64c45513-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772963065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963065, "uuid": "0c46541a-d66d-4da2-ba37-7f19c7ef9b77", "comment": "Malware payload", "value": "1785f5dc98be9e2c728edb9a7f683942", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963065, "uuid": "c91ba4c7-3a1e-4f9b-b154-8cc0e139e489", "comment": "Malware payload", "value": "5e05fc45ef66b7ab30b45c9316a13cdf6656565061d7ab3abd6a7e972dd3245b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963065, "uuid": "db8ecdd8-9b7d-40c3-91ec-9cba15c21d6b", "value": "T19387331AF39599FBDE33D0FCC0854447EA9678E54381422717F085EA4E606E98A2FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963065, "uuid": "7f2106b4-9cd6-472e-a627-d18d66c8ebce", "value": "da7539752d4292fc084c7d813366cc8b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963065, "uuid": "fc5cbbc8-acc8-4bf9-b3b5-d3647b95d6d4", "value": "786432:/rKU6DT0ucbTbMv22zAeV/X+0tdshTc3XyPteDeCOdeuKF1bu:/uRf+nAu2FuQd73XyFeDMnKTu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963065, "uuid": "e6f34a32-22c4-41af-b881-62a823295064", "value": 38833672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963065, "uuid": "73e08e80-1884-43f5-a2ec-327b22487912", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68948a64-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772963072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963072, "uuid": "356ea4ed-53e2-4809-8180-be9ffb3bc4c8", "comment": "Malware payload", "value": "fb329c06bd6e863d64ae832ddabb201d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963072, "uuid": "4dd6c145-5a3a-459d-b848-1bb21d982896", "comment": "Malware payload", "value": "16996e364e1f7790ec03b379c4dbec19825ba20b1c73b6fa381218686114dbc9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963072, "uuid": "d5c8a52a-a166-4884-b6b1-3fca08710cf5", "value": "T10AF6E130B206C13ACD8605B099BEEB9EA13D6B34077150C7B2D86D2D29725D37736E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963072, "uuid": "9ca999cc-74de-4378-ab60-98f3f5f4aa75", "value": "e3a75d52e3cb45764432542ec55647c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963072, "uuid": "136fc059-47e7-4a24-84df-69e34d9d6a64", "value": "196608:nl0OnxDpfdjIxPUlzwykDSS6FNrFG2WVAC0AV1mphY8QBz81SCVX/nsqiSgWVj3s:BtlTNr4JH1mpuBm1Vvsq/zT5S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963072, "uuid": "c7c5cb77-0018-4dd3-9d8a-616c6e55f0a0", "value": 16718044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963072, "uuid": "d00b9792-7eb6-4182-bd70-095ca831655a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dbf676a-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772963080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963080, "uuid": "3fcbf466-ebe8-4bf1-a55c-ffde95708017", "comment": "Malware payload", "value": "555d9aa4333cbe5a15a1528fdff8dbd1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963080, "uuid": "7ef23e7a-bbcf-4af6-85e9-e443b457c19f", "comment": "Malware payload", "value": "dd3579801cd58a999a6223ef687e9e0276c79ba6c3bd3d948d934c02e2cae2c1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963080, "uuid": "8a2bbad4-86a5-4399-a28f-abad3f9d5b14", "value": "T1D5F7BE6D13BCEFE4F039BCCE409E2C9109982305A67A6233D25CEA55D3D875E0E768", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963080, "uuid": "bcbdfd76-ac08-4305-bac6-206c9625869c", "value": "785581baab0911f04d2f4ae759b57715", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963080, "uuid": "02b7fe99-d31a-43f5-9d2c-9e32264fb932", "value": "1572864:+r+IY7nDAWyY+DhXuC+CR3kWPrjfy9UDOgi0FYg9Sz+Oc3PGRZojf:Y+p7nDgNFF+CRhFYgDOqORZu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963080, "uuid": "e50aa234-8e07-4ebe-a8ed-1cfb47849a66", "value": 74699264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963080, "uuid": "c3f6dc95-991a-49c5-9170-8ebdd1e545b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7101adc2-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772963086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963086, "uuid": "ada596ab-24c9-44f4-a70c-25979c7fa9a4", "comment": "Malware payload", "value": "2d8a7bb4c963ba5ac74adf115d37b23a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963086, "uuid": "834161f6-2e4c-4fbc-90f8-50fe5d432c2b", "comment": "Malware payload", "value": "70eb45ac0124f272f78c4fae09c2437b7e87d3ace343b696fea495323d2d939c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963086, "uuid": "3e4f5c32-bb21-4a8f-9e19-53ae115ec825", "value": "T18F873315BED1A9BFEF2355FC9106C5C7AE9A88F601C1816317F049E7CA200D58A1EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963086, "uuid": "b01d85b8-ea00-428e-a421-697d8a455972", "value": "ec3d55528df9b48ff8e5d2ff74321ad6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963086, "uuid": "7da4e757-1ca0-48a3-9d1a-708e09ad6e22", "value": "786432:6FRMs+NfBqnzM07m3DR9qd3z9JY8HKw6DyPteDeCOdeuKF1bvY9:6FKFNYg078DR9qd3xC8qwayFeDMnKTv0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963086, "uuid": "d1a7250a-0df3-42e8-beee-b5c0b2916bfd", "value": 37194864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963086, "uuid": "cbedca98-71df-4486-b417-64afafe79143", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71d66f1b-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772963087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963087, "uuid": "2dcc1de9-a94e-4b7e-bf9e-e6273b55dae0", "comment": "Malware payload", "value": "3d272dec390b882a59bf516bb0975c74", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963087, "uuid": "d5847f85-ff47-46d6-9aa1-04d460862d43", "comment": "Malware payload", "value": "28dfa536151ed42a341094c699fc177118e5e78ac88d0a9a4694c25681cc0e1c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "e6cc8bbf-1e51-45bb-90d9-68d494e5491f", "value": "T1D4873315BED1A9BFDF2356FC910AC5CBAE9A88F701C1413317F049E6CA204D54A1EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "0a79dd15-d79b-46f9-a963-f91f910e63d2", "value": "ec3d55528df9b48ff8e5d2ff74321ad6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "2778b691-a80b-4e35-ac2d-0e093a3d8bf4", "value": "786432:6FRMs+NfBqnzM07m3DR9qd3z9JY8HKw6DyPteDeCOdeuKF1bvY7:6FKFNYg078DR9qd3xC8qwayFeDMnKTvq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963087, "uuid": "23aa2663-be89-4c61-8892-b869f5488f74", "value": 37194864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "37373da4-32af-4f65-81cc-f4ed1f98a80c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71d9d391-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772963087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963087, "uuid": "de256629-4d98-4202-8b94-9f8b02adaca1", "comment": "Malware payload", "value": "7ea23e8e1ad8f20222e1b3504483d18e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963087, "uuid": "581ee5d5-747a-4a48-98bf-a40fe37a1276", "comment": "Malware payload", "value": "f4be878efee7e586e5ac8da0096790f75c7654666c51dfd29373121f67ddaeec", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "fce45f2c-dbf7-4289-a745-728ee68ced55", "value": "T11987331AF39599FBDE33D0FCC0854447EA9678E54381422717F085EA4E606E98A2FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "fd551956-1e62-45fb-92b6-23f9728c7e08", "value": "da7539752d4292fc084c7d813366cc8b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "c5750e53-3ecd-4d77-9e18-2c8e9696d5e3", "value": "786432:/rKU6DT0ucbTbMv22zAeV/X+0tdshTc3XyPteDeCOdeuKF1bx:/uRf+nAu2FuQd73XyFeDMnKTx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963087, "uuid": "0e346f45-29e6-4388-b321-85f8e6419971", "value": 38833672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "72ff1fbd-b07c-48cd-8666-fe6ddbad0c02", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71db0b6f-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772963087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963087, "uuid": "7a121474-9401-4f46-99db-a89356182c1f", "comment": "Malware payload", "value": "fcdd7b0819eeb559c5f145b06eab406a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963087, "uuid": "33d27120-b76a-458d-bf12-5487493234d6", "comment": "Malware payload", "value": "eeb2b40661778568a0af931f4b277d5c080bd7cb28264cfa418fb288c781b2e6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "607b159b-536c-4c88-ba78-638d713c6209", "value": "T1AE873315BED1A9BFEF2355FC9106C5C7AE9A88F601C1816317F049E7CA200D58A1EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "192693fc-1bd4-4887-9f8c-e7fb19e61f91", "value": "ec3d55528df9b48ff8e5d2ff74321ad6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "b7817838-0847-4880-9c31-a4b3e8d924ef", "value": "786432:6FRMs+NfBqnzM07m3DR9qd3z9JY8HKw6DyPteDeCOdeuKF1bvYi:6FKFNYg078DR9qd3xC8qwayFeDMnKTvz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963087, "uuid": "3569c3dd-96a5-4c6d-9394-300a48fdbaa8", "value": 37194864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "7ab42f0a-7f13-4492-b414-783dafecaf3d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71f9d22c-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772963087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963087, "uuid": "2ad595fd-3a58-429d-a7dc-651bed74103c", "comment": "Malware payload", "value": "e13e1b3c1a3b9cb648dc9b799a6bd270", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963087, "uuid": "cb83ca11-e91f-41ae-863a-c950375eb30d", "comment": "Malware payload", "value": "61caa2bce7233282c1511f97eda4eb0c83150c90f95e42adb952ac60bd116548", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "0445b450-15d4-4567-91b9-392ee1bad3d1", "value": "T102873329F39599FECE33D0FCC0854487EA96B9E54385412717F085EA4E206E58A2FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "1eb50fad-b9b1-4ed4-aa3b-379cfdf2cfcf", "value": "da7539752d4292fc084c7d813366cc8b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "da18ec70-36b3-4985-8e69-f4a4e7574444", "value": "786432:/rKU6DT0ucbTbMv22zAeV/X+0tdshTc3XyPteDeCOdeuKF1bn:/uRf+nAu2FuQd73XyFeDMnKTn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963087, "uuid": "d95810ca-d3b2-4a4d-8a16-734b4b16d3b0", "value": 38833672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963087, "uuid": "4d597410-6640-4faf-ab6f-53face8042d6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82cbcb62-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772963116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963116, "uuid": "4677f3df-8e53-431b-a9c7-4eade43e891b", "comment": "Malware payload", "value": "d55133890596199290b0ca39d273bf6f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963116, "uuid": "c0c5e73b-8d12-4297-b24d-13afc31279bc", "comment": "Malware payload", "value": "546ca6ee71a389808b8bf74b265164e8afd880072a74a1961ef48407337da2e5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963116, "uuid": "90f10287-0e50-4191-92ba-3136400c32a8", "value": "T1D888BF02E5615079D88731B3352DF73E6D2442068B2F9ED79B961DD8BF783D2223A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963116, "uuid": "0b3a7945-8d21-4557-8b08-0404bf31691e", "value": "0925baa3417a0476b8cf8b3b06443192", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963116, "uuid": "86dd8808-4912-4592-9536-fc8f7e2373f5", "value": "1572864:bOJFn5vRsX1MT1/4v7AjTsGsrKaL9pDRvYNTdWGhrIUeRTBpy+lLdQFywNYj3Egh:bwaD302+KDjVkW1dsURXdrsgT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963116, "uuid": "6cacbafa-e5f3-4d45-8254-27c33f6c483d", "value": 168076288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963116, "uuid": "6b75a7db-efd8-4aa5-b507-964f8e9c2d36", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e37c20bd-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772963707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963707, "uuid": "280b4144-5c8c-4510-abf2-aed4d20b1bc6", "comment": "Malware payload", "value": "81728445de0215365e8736e23902db92", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963707, "uuid": "dc218efe-cde1-4dce-bcc6-382a991bca55", "comment": "Malware payload", "value": "497369062516b4e8d50e880adadd1cda7a796e5b9d27fc3e58ad2bdba70769af", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963707, "uuid": "5fb9a066-ff05-4628-9666-4982b2072895", "value": "T1C14121171AEA0229F2F6DA3218776B21B972F882AA159C2D00D0010D2C13A00ED26F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963707, "uuid": "2d0024a7-889c-4f6d-9f8f-d86814f8ab47", "value": "24:8BoJyl5+IeeXZYyDglco5ZiebqbFlqddNXuHY8EHGFGyCabt7im:8hTJzDg2a4eoFgdLXuH4HGFGfap7i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772963707, "uuid": "c30dca35-d4d7-429c-8a94-84be7a38829e", "value": 1990, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963707, "uuid": "e42e154e-bd57-4608-94c4-50f3fa6db4e5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abbb6913-1af6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1772978217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978217, "uuid": "64b4b5f3-7526-4eab-925c-3a6291e45a17", "comment": "Malware payload (RustyStealer)", "value": "d2f52cd3127eaaa7bb98a8a9d8860001", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978217, "uuid": "99a5869a-0e53-4190-bba1-73b429c4058b", "comment": "Malware payload (RustyStealer)", "value": "08bde694b34a73d4694288a6a67a7e0d9628066589215c17291bb4d21dc9dfb3", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978217, "uuid": "5f755346-8802-4bec-818b-b08b72188699", "value": "T1B8F53363FE90A572C9EF61F1040CF3E8CD7685318750CADBA7F51D20E895AF21276A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978217, "uuid": "0c88bbd9-1e1a-4270-9041-a16dfd3df944", "value": "8efb0dc5e3712d2bd3cf552fada17a3a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978217, "uuid": "a748ef6a-e7af-4031-9971-b8127a8e4413", "value": "49152:LDdMXHQ4OTj7qACzoh2ytVBwLASAU+xZtArCIjDpuo0foJC8RvCsm/nh:fdYHLOn7qACzoFrSt+JA+I/so0Qa/h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772978217, "uuid": "be9ad233-958d-423c-8aaf-d66aef151d72", "value": 3487424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978217, "uuid": "198125c8-7b37-4482-aa08-b865ba352ff0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b1c0da5-1af8-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772978887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978887, "uuid": "487658c9-8127-45f7-9d54-3dbde5831765", "comment": "Malware payload", "value": "11ce403e5e0277bbb7ef5b38ce11a04a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978887, "uuid": "17c5adef-4941-4227-b3cb-208d46327c93", "comment": "Malware payload", "value": "bc7607aea3bdffcf3e561ee265d31a761d309b153f3cdd7ae188edb3e03aeab2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978887, "uuid": "59a08a99-a5cf-4275-a669-9351436b3b82", "value": "T1FE93093174AF052A166F436E80427B1CEBA981DBC601DBE8F4FD51595FF4D8932672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978887, "uuid": "a35dd5d9-d492-49aa-a991-706f014b99d0", "value": "1536:pXyp1xQ/uwMmAIa14oXs/I8epeV7tb73WAxCJCStkb5fvnw05S4jrmiOPsCZK/6i:pisIbzEStkbFvnw05S4jr4PsCZs6Y/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772978887, "uuid": "6c18ec61-56be-46bf-83ea-f5c3cb08391b", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978887, "uuid": "5ca5e0ed-be29-4133-b0ec-690a40a27b4a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5caf8356-1afb-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772980231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980231, "uuid": "c921c60c-f482-44e6-9182-949b0a6d3c8a", "comment": "Malware payload", "value": "37fb0dab771a32116bc6531734fe5f30", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980231, "uuid": "aea767d2-91cc-482a-9e64-494d8d138a5f", "comment": "Malware payload", "value": "1b884ad68ef3716efff7fd3ee5c56eeaf9f776c59464017e17e5337f51ca5161", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772980231, "uuid": "970cd588-05a1-4922-93a4-ef131b0c3b51", "value": "T1B58308327589582A210B028FD263336C70EFD8E2D611E5B6F6F922344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772980231, "uuid": "2620ce7d-32d6-4d07-9c3c-192665529cfb", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbncWaBVN/:XEKltp9t2SX/yr2pbcWUVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772980231, "uuid": "039bcf3e-b2c1-4623-9ed2-3612939ea11b", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772980231, "uuid": "8801f57e-f00d-4de5-862f-31f374c2cfe8", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53ed3fc6-1afd-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772981076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981076, "uuid": "4b886640-fd93-46c5-8b42-f628ecf1ff63", "comment": "Malware payload (Mirai)", "value": "8905fe82ed132aa23d134c3fee67ecc5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981076, "uuid": "2b64cd41-e0ba-4941-be00-1f0fa87ed992", "comment": "Malware payload (Mirai)", "value": "aeea0ea1ba5b0f3362acf93b0c4c6a83e65cef4cd78febbbb7d15dc2e4003957", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772981076, "uuid": "ed5cdd87-5306-4db6-960a-b7e33a12d182", "value": "T12D41388CA049D3A297CAAE0F59F3D9D8F06E81D766887DD7CE883EE58C4450C345AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772981076, "uuid": "0f3a0a57-62be-4ae6-87f5-8cc210ef8a3f", "value": "48:oPjnoGm6qUQTvcWOZJHSOI6IcH0bFptCeCCQN5Y:ozoGQUQoWOZJHSObLH0bFCcQg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772981076, "uuid": "ff81f571-0ed7-4861-b888-9f3ad7a6b364", "value": 2219, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772981076, "uuid": "f8bdd7f9-bfea-4e12-a2a4-aa2692861326", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "527512a5-1aff-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772981932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981932, "uuid": "486fc2e6-a7d0-4366-be31-aa4cb0084e17", "comment": "Malware payload", "value": "857b906d8a51442d7570362828ad8d23", "object_relation": "md5", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981932, "uuid": "26e58682-4d8c-4fe0-bc47-3803265fce04", "comment": "Malware payload", "value": "c3bc2ee9bfddda67f5a2e2c3bc87d6f5b2ed9cd37b74b1922b15dc4161ce2c80", "object_relation": "sha256", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772981932, "uuid": "560b4ff2-b0be-43b9-802a-3e351b8ad069", "value": "T19EC6334DA6F5340AC9E12776CE23C21C24892752EBE59879E48603E35978FCAFF61D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772981932, "uuid": "a13b46d3-675c-49d4-8c6b-e3c43df23d97", "value": "196608:3Atiaf3t564guYyaL095VYjkHu/TK8105CIXq35L2Wp2dS9VV3jVhUS:Cjt2uYyasf8kN810daJp9jTVhz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772981932, "uuid": "2d861377-2e72-4982-8f45-9a794ee0f89d", "value": 12326183, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772981932, "uuid": "aa8ed326-35f9-4f07-b9be-92dd7180d57e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce18f7bb-1aff-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772982140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772982140, "uuid": "b7536cad-2a0d-4eb7-8384-1a7047164b42", "comment": "Malware payload (Mirai)", "value": "506280ec31c0ec052a5551e6c14ce3b5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772982140, "uuid": "116b0dae-86a1-4310-842b-74b411adc7fd", "comment": "Malware payload (Mirai)", "value": "99bb50fd4b8cc8fedc8301adffb242bab2cb25608da68d2a2a7fd78a7eff7217", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772982140, "uuid": "c9832c46-0840-4ccc-9bb6-b4b40ac26ff2", "value": "T1D675337684BFC753F5EAEFFCAB3456E201FA3C0BA59984E0EC0D46114E21E960614B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772982140, "uuid": "acddbc65-864b-47b6-b528-7628da21729c", "value": "49152:BLakNs4pnsgGTRxkm4PBT1ygYAax8eX5Z:Fbbh4xF4BMrv/Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772982140, "uuid": "e401d35e-b435-4b74-a4a7-e24ae083fa60", "value": 1688488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772982140, "uuid": "7454cfb0-f32c-4847-a6b9-8a67265ab4f3", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f57aacbe-1b0a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (ToxicEye)", "timestamp": 1772986930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772986930, "uuid": "bce4c23b-453a-439a-8b13-61a921672bc9", "comment": "Malware payload (ToxicEye)", "value": "8e7300418be50f5d0952ab4825a3f90b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ToxicEye", "colour": "#9eee58", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772986930, "uuid": "87d2df66-5ac3-49db-aed4-0794d865213b", "comment": "Malware payload (ToxicEye)", "value": "63642b34140b25f3a46f465d74d6ebaa1d0eeea2b1e0a07b10ca4aa6c038c212", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ToxicEye", "colour": "#9eee58", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772986930, "uuid": "2acac55b-d913-45a7-939c-2da6a9d98f23", "value": "T155E3E72837FD9D14F1FFAF3AA9B251040B32B816A972D34E0AD5A45D2CB2B54C914B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772986930, "uuid": "b3aed15f-13e9-446c-9fb7-bf7a33b47bb9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772986930, "uuid": "8204f9d2-b0a7-4f94-be94-8b99d0f03a3f", "value": "3072:j/fZ83DkWciYmvic51Jjo95+l6QW8XCrAZw9:8gjm6c51i9kf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772986930, "uuid": "541a5a5b-1316-4af7-af5f-18f962a1ca84", "value": 148992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772986930, "uuid": "154670fd-4be7-47c1-8885-1b6076b07910", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7df5be8a-1b0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772987589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987589, "uuid": "57ef0f97-aee4-4194-9179-4097611ed089", "comment": "Malware payload", "value": "8d45cfe7355ce79d686cfea990bcd8b9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987589, "uuid": "8e7cb979-9350-41fc-b456-e37e46209e30", "comment": "Malware payload", "value": "d9370fc367d42233ad35bd1d749a889b6184822e6c758a0bceecabbb89cff050", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987589, "uuid": "7f025ae0-de4c-4b8a-b928-7d3b5fb64b99", "value": "T11BC4231DA0547B51F64B6A78B323CDB08B2AD13FD219C388A0840B399B5BF5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987589, "uuid": "95d9c7e7-2a8d-4131-80fc-32965add644b", "value": "12288:AMU+0xq75aS9iYIp6cP/G2Bku6zXLkHXP427b7:0+J71vI/GzXIftH7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772987589, "uuid": "8719c26e-3b84-4a8d-94a5-5a32f6feb09e", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987589, "uuid": "cf730720-044e-4226-995d-597ebfd5c901", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b695bfeb-1b0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772987684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987684, "uuid": "1481548d-026f-4bb8-ba1a-1b12fd41a597", "comment": "Malware payload", "value": "9d8ea8390da025f0c92432d7e30c371c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987684, "uuid": "aee480b7-7f07-4730-9231-7848f789cd47", "comment": "Malware payload", "value": "4192f15ae6d01453f2442dee5792b5f82132b124ffa6bca1ab393d55b05cd390", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987684, "uuid": "85dcf014-9fe8-407e-9caf-6cf10eff3c45", "value": "T16C483362A4C6B896C18AF336B2B9355538F1C4A1BBF36B3B9345C0D634568D937336", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987684, "uuid": "4cafeea4-6f19-48b0-832a-7ce5991fc50c", "value": "3145728:C7DXMOVWTG6l2fnBxZzcqgb38T+Q+rhzoNFyv:wDXYTwfnBncl38T+nrcsv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772987684, "uuid": "f54785d7-62e8-4dfc-a915-c1958c2d7eaf", "value": 116666945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987684, "uuid": "233bb9ce-bf29-465c-968d-647e58f33879", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f02eb1e-1b0f-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772988825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772988825, "uuid": "03e2bafc-7d5b-4389-8750-7cc2211623c8", "comment": "Malware payload", "value": "2a15bf1f2b9af528b0c1eabb3447ca1a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772988825, "uuid": "c67b720e-b8a6-44c1-9c09-5a490271a60b", "comment": "Malware payload", "value": "4d206f23dfad6214675af947d5847f7120ef1b3a6a4378a7785679e77bf0efcc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772988825, "uuid": "9f516643-14a5-4aa6-bb38-cec1dc0f0a4d", "value": "T110C3D7ADB2E27035039325A5147F410AE27B1E553C4B8294D17EE9D4AC7CE8E817BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772988825, "uuid": "769b013f-0626-4e23-bdc5-3d42ddde3df3", "value": "1536:hOuWml0L6ep2PEb0wu099XeuVxzacdYteolbF/2WGfdQOUKbLon7dKW1RHNb51lM:s4l0+ZP07euyRUWGlG1l7wvB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772988825, "uuid": "d84cda40-fe02-4237-a921-63834febe929", "value": 120803, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772988825, "uuid": "b17dd205-ccec-498a-96ce-458ac2f68f23", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "213f01aa-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989581, "uuid": "5cbe8743-32d4-4665-8e92-5bf62d3172c3", "comment": "Malware payload (Mirai)", "value": "26f40cf8b246610515102e2c7a4fad3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989581, "uuid": "1d442e0e-68ba-4c7e-af79-95f5f1838076", "comment": "Malware payload (Mirai)", "value": "7ab73e8854911ac8e15a557d7337566b0e88cbeb7a6940263a59b0c3cd379ea3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989581, "uuid": "581145eb-a3d6-453d-bb82-a9bcbcea1a10", "value": "T12E4533CB2C56B99618056CF6FBEC2D165CC294A130BCD02EC2869465BF3EA45FE41C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989581, "uuid": "49cf63ed-6cc3-419e-a233-282479c21df5", "value": "24576:NQOEf6hP95dfuWM40HDIQN1c66utnuAaOMKnCoZwrAEmf3ocIzQ:+OvbJiHDR2utuARMPDbqt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989581, "uuid": "b105cab0-db3f-4c2b-8d3f-488077dc3977", "value": 1208428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989581, "uuid": "f5a4d486-e3ff-4e6a-b221-55891d7df0cd", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "214c6bb4-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989581, "uuid": "ed7237a2-cae8-4368-8e30-fb4059c23186", "comment": "Malware payload (Mirai)", "value": "2294bb55aeb814b2eb35d615777b4fe9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989581, "uuid": "26edd0e6-e950-48b2-a19a-79611bbccade", "comment": "Malware payload (Mirai)", "value": "386df894285f8910c11d4823a39ec3b7dfcdfbbb9fc55b18bab756761b04f7f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989581, "uuid": "ef306665-5289-4449-8ef7-7a3a3d111610", "value": "T11945336609B4E7A1CA9EE0FF6151E45F5C018D04F0A96C2DE43D213B8BCD1A5EEA1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989581, "uuid": "48dae6bd-d6fc-4949-9aff-b187a1bd4dc8", "value": "24576:/Cz7dGWUQaYz+6Lve2MPyFtYbWCfj/DMr11PETIhjV:qtHUt6LBgyjiRMx9mI3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989581, "uuid": "fde72a8e-64c9-4040-8e73-e237bef63b17", "value": 1208604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989581, "uuid": "02ac8411-779f-48fd-9eae-f0975f339d73", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21aa0cc1-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989581, "uuid": "ca9fa24d-340e-4844-84ef-5c34b4169e99", "comment": "Malware payload (Mirai)", "value": "b0db70371d71bc166d0f53d93ff24164", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989581, "uuid": "980aa16d-09e0-425b-8e0c-57f911694f7b", "comment": "Malware payload (Mirai)", "value": "8bc4f8778aad01cdc9a0b10fdad4da83e88926f2989ae8cc1bc3e9969c7f5963", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989581, "uuid": "3356bdef-75d5-4d04-860d-ed2bbde09034", "value": "T1B64533EF882ED969F49F242F142502659DE4687FF08C263B6EF51BA6ECAB114F114F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989581, "uuid": "e1c3dfc6-2e75-4bda-94b6-0db430ff61e0", "value": "24576:Jk5vEMyrc1uZIEuvoF3JKu4Ooa6XEz+pZatj5fsqzAgDbYpCIgcaf:JxMM71ugT4NEz+pZ4NbzAibvlpf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989581, "uuid": "26bdedfe-cee9-45bc-b9c1-994575fa5572", "value": 1205288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989581, "uuid": "60ec5714-0272-499e-a991-0bc503920dd4", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "248f6b81-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "48740a9c-0f03-4f15-b2c8-dfa7f3c27ee7", "comment": "Malware payload (Mirai)", "value": "9d36e634c314c4ade72c285dfeb21707", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "d7f33a1a-f9a8-4b2e-89dd-3c664344852c", "comment": "Malware payload (Mirai)", "value": "8f8e70a0c1fc856289a5fdd7a474e117c1e0a7b905d58c77d22772947ec00e98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "df557ddb-ad48-4e5f-835b-61a6086251f6", "value": "T1B745336FD46E80DDF06F221B0469123D9DA825BF729833376EC69962CC96014F9DDF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "5d709db8-bb34-49ee-b910-0531e8b0eb8d", "value": "24576:Tk5vEMyrc1uZIEuvoF3JKu4Ooa6XEz+pZatj5IgHnrk8xAbpgZ4O8at:TxMM71ugT4NEz+pZ4rHrfagZNJt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989586, "uuid": "1ff57f22-d49e-451e-a50d-b39affdcb2f8", "value": 1205536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "63d3a674-25f3-4fe8-8211-2bad82b14ee5", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2494be39-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "e35cc876-53c9-4027-982a-b4f7624b4a96", "comment": "Malware payload (Mirai)", "value": "89d809c2d3988a540198115a37d364c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "874dd29c-a302-4292-9aed-980f9d1dc5b2", "comment": "Malware payload (Mirai)", "value": "7c0204594050e101f1c69985397c31f783347b8cc0aca0290958997de982fa9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "fd8a57b1-7629-4606-9896-2be0028090e5", "value": "T1A44533F036C31B68D74E2AF26AE1C5530521BE64D7949627DB9378DC308179CAF36C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "41d1b6a8-2af6-454a-9537-a59e2907f947", "value": "24576:r4iDyYF2FAxqYM5uMXXMUm1BQn7Asu6aOD20cXYkJ7EL3ukJT:r4iDy9CqYM5tXMUkBQECaOPdOQL3ukp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989586, "uuid": "96271a73-bd0a-4b71-b9f8-233aa1ca05a5", "value": 1205200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "4d0ea387-b8d3-42ac-8f47-ff968bd21e71", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "249ca470-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "7271f78f-66a8-48dc-a29b-8266e2a79072", "comment": "Malware payload (Mirai)", "value": "54dae6bbf6254d335b8412f484a6564e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "234776a9-14f6-4495-8571-c8be3d0262d4", "comment": "Malware payload (Mirai)", "value": "db05a33b1a5bcafa971154bc0c8c1ab94b71cbe86d11a3898536cba4ea13a9e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "f326adc5-3019-4fff-b679-4eb25a0754c4", "value": "T1C545334A1C65B68D9C42265BF3F858224D46C850307CD56EC505D992FBBEFA2FAB0C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "2a56c3b8-24a2-445d-97fb-61940dead8c0", "value": "24576:WQOEf6hP95dfuWM40HDIQN1c66utnumBkZyC1H8UCIx3P:NOvbJiHDR2utuFy0/pf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989586, "uuid": "ab87818e-af7e-4a40-b023-7c91f6621dbd", "value": 1208596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "62436bbe-65b7-459c-97f0-8853940914ba", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24a7260d-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "62b28ebf-6d36-4f6c-9f76-98cb18040cad", "comment": "Malware payload (Mirai)", "value": "74bc1bc502cca121846e22643037eead", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "21cf3634-a85f-44ac-b8b0-051e831e54b5", "comment": "Malware payload (Mirai)", "value": "704bd520f663040e9c64754e2e146b5533f3284cc7c5818782a74e6fdc740208", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "e1c886aa-c743-48c6-aca7-2b473b9bdb8c", "value": "T19A4533EABDCBB1826939B1D8075CF0D151135BA5068AF89113A7ED36CB6F1C02BE45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "c14a4776-bb0f-43d4-b68a-5ec78ef05a68", "value": "24576:9iWsNVStmY2sHjDISX7bVefQHWOpuki7wogTJ/ah8:4WsN8QY2sdX7bVerOpuOTBo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989586, "uuid": "682e5847-5b15-483b-93c4-98b68b801e59", "value": 1208324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989586, "uuid": "a3a96b3f-1e37-490c-8362-68c2ff0e6559", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "262d415a-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "b2ceb4db-632d-4fd8-8fb0-7156a3a4c8a6", "comment": "Malware payload (Mirai)", "value": "bc2d1910899b744c59720d9754968703", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "0f814744-e524-4d80-9517-56c341073594", "comment": "Malware payload (Mirai)", "value": "77e0d2b04a35396502dde3159a66a08ba846d129d964f7ab93f0161e3292f899", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "20fb5677-4193-49b0-8f67-1a976b1220ee", "value": "T1FA453332C7E02346516D99B3E4572FBD9A62C1E8FF54CF914028ECBF174603CD8A5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "d5c404b0-4c38-41f7-b552-cb4ca4c8a0a4", "value": "24576:h0yecJ47n46yH/9/zPAd3+pZn308JbqelII+KiuZOLmp79gjYWg:hNem47n46Q/9/cGn308JmydgDLQ76YWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989589, "uuid": "260d898c-34c6-4e31-9a76-fd40d31e97ba", "value": 1195384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "bf2b15d6-2ce7-47f9-a5fa-a1ca72f89b5d", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26334d7c-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "a54496aa-c828-4609-b19d-9031a777a084", "comment": "Malware payload (Mirai)", "value": "7d29f544d882ff599e67fd137c9b231d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "3c2d1131-4dbe-44d9-aad6-683f7987261e", "comment": "Malware payload (Mirai)", "value": "ad614a1b17d220cf1edcb84626e86e07c5ec78f14b223c9ff7d4722a4d2c7a55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "578b4a2a-c67d-4f0f-857c-49afd10b7981", "value": "T1424533CD60491B98AB9D042CA94FC5240E72E97F86E5D640770778D0DB875FBFC2AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "776b2cf3-8a8b-42ee-932e-824ea5f6a277", "value": "24576:j0LISnZFViU27tP0q8NqhgisXKdgY2zED02FcuG2r/dbaRSNM:IMSzV9yt8q8Nneh4QP7xnM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989589, "uuid": "bcf28793-3eff-409d-9e27-62d3ed38a476", "value": 1197908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "412f8ee3-b57e-42a8-ae01-f8c9c412c8b8", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "263811ff-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "8505e2af-a65c-48e3-82e3-6c10dea8522b", "comment": "Malware payload (Mirai)", "value": "0f11b34d2847603830a9bf5d33b66da7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "7c802c85-47fc-4139-802e-8de9a3e10aba", "comment": "Malware payload (Mirai)", "value": "d82c58c366cf3eb2d2e8b78c999853fe39ba4d6b83a2d715c71cf8ee7a7845b0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "83c194d3-aba7-46a1-82b0-37e95f1b7eae", "value": "T12D45338E3E1A729D4C05589BA7E85822ECC9D0C535BCD42FC4CBC4E1BBAEB52D560C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "38d67e9e-c2cf-41ab-8787-f72072e47cbb", "value": "24576:rQOEf6hP95dfuWM40HDIQN1c66utnu7ZGWZP9f:EOvbJiHDR2utu7ZlRZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989589, "uuid": "336dfb0e-8397-40dc-a731-72d637a274bb", "value": 1208556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "e40f4f76-fa88-4186-8bce-a10dadc987e7", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "263a75a3-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "e28030e9-93e9-4d90-a0da-2b8c67021c71", "comment": "Malware payload (Mirai)", "value": "9c459cb9db9f23bc2578038c6812af8e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "fff9fce7-3d9b-41e2-b7f4-4374f9006791", "comment": "Malware payload (Mirai)", "value": "5e600cd93d16868b09c89a2fa3862cc3869ecc6692ea54db25c4c7ab52eddea7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "7ebaf734-3c03-4a6f-a8cb-3fbe9d47c374", "value": "T10B4533F07F427F18954F28B96BF2CFA24811BC93E1569185C7A37D9A240870C2FB5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "b5dd332d-42c0-4c5c-9361-983a10c5e598", "value": "24576:E4iDyYF2FAxqYM5uMXXMUm1BQn7Asu6aOD9rPNUSdOVDO0yo:E4iDy9CqYM5tXMUkBQECaOr7OV6bo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989589, "uuid": "8074a35a-0213-458c-a202-3f98dd939e44", "value": 1205248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989589, "uuid": "35ac6951-b3fb-4201-9e96-6873683224f1", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43aa0f8c-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989638, "uuid": "708520e5-8234-4acd-83f3-937bab53bc5e", "comment": "Malware payload (Mirai)", "value": "9c1d356e24b5f95c35ed9fc2000e0130", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989638, "uuid": "c3a53c20-6b5c-441a-9d0e-7c56d507de2c", "comment": "Malware payload (Mirai)", "value": "f278bd6fa02955daa928fa2db11aedd6400b64b7a6d630ba3ebc6f405e42bc37", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989638, "uuid": "5b4e09de-c1f9-442f-87d8-e7f1c5d85678", "value": "T1AD4533120DFA6702CE9866FBB731689AC850DD4D7159386A841E7837C7C81E6EFA0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989638, "uuid": "65179e03-9835-4d8e-be1b-668faef09702", "value": "24576:nCz7dGWUQaYz+6Lve2MPyFtYbWeMAPxWSj4:CtHUt6LBgyji9NxU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989638, "uuid": "4d0a61c9-5338-4463-9293-7b989b4f1dbd", "value": 1208548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989638, "uuid": "350c139a-30a7-483a-91ee-63055d51889d", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43b3b8ac-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772989638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989638, "uuid": "2467ac31-9802-4a53-9cf8-4615f09390b6", "comment": "Malware payload (Mirai)", "value": "baf1a5eab9881abdcbb6f15dba3ee4a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989638, "uuid": "463d57ef-253c-4180-9971-04fa68db6a3f", "comment": "Malware payload (Mirai)", "value": "e1586449b0cd23ff53220921d23625d627c75e89a1630267e4ed47d0c1694b15", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989638, "uuid": "1fdb3b92-1549-4960-b40b-9f135566ea2b", "value": "T1B14533EEC1742FA444EC4C389D2945EC572AB55D96D281D4D8E6AFCA2C8BC3D13A8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989638, "uuid": "a78cda17-278d-4fff-aa65-729de908eae6", "value": "24576:miVp/UcJIQWQLucvxzC6SGw2z5CWzY+CbTKUWVxIII796iybQLBDbzdX6:mi/5ZvSGw2zY+CKNgI9iGa3zdq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772989638, "uuid": "b5383096-a3f3-41e2-aa11-11416e603e85", "value": 1205368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989638, "uuid": "f9fd2936-cbfd-4e22-9793-6ed6318c0bb3", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d66a299d-12f8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772991198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991198, "uuid": "0dc6ed7e-7c89-4e5f-92b7-1e1ebbd01117", "comment": "Malware payload (Mirai)", "value": "57068c7c4b393ffe45af12eae4a05d89", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991198, "uuid": "ccbf2f92-777c-45e0-bb28-16703363aedb", "comment": "Malware payload (Mirai)", "value": "8af7375ae4e5e82861e5d6e77970f0dda09e5573bed78d71e1bdb4fabb661cbc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991198, "uuid": "8550c6d2-4443-4cf8-814f-1f7bd2296a44", "value": "T117C31B45FC405B23C6C612BBFB5E428D3B2A17E9D3EE720399255F60378685B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991198, "uuid": "daceea7f-a66a-4c9c-bceb-d88536b3f715", "value": "1536:p/Ka0rG5yC/cMChygtVOBdWFAcJX4VlgXTAXYFkWUGZrSo51WhrV1l3GwywEReQR:ZKaprMh7TOXWFh4UXcYFkWpZlvWNUm5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991198, "uuid": "8ad04e9e-39bf-4236-8c1c-375b53c5320f", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991198, "uuid": "06cc0a61-5716-478c-8bc7-a26957f8376c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e581d5bc-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772991198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991198, "uuid": "c51b44b8-5a35-40c8-a677-b6ad6dda0714", "comment": "Malware payload (Mirai)", "value": "5456039b6049488b40eeae61d8700aec", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991198, "uuid": "74e640b8-8223-49ad-9988-a5a83b00964e", "comment": "Malware payload (Mirai)", "value": "f70d152c4801e2b0b6a5b946aa659759277421672928e2cb1e2884b535e79538", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991198, "uuid": "761a7ea2-efbd-4c6d-b9fb-7750f34a2735", "value": "T13B937CC0F683C4F2E84705B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991198, "uuid": "83da6177-29ef-4d18-a967-329844717dde", "value": "1536:W/QCZaxGdvts3i5JPho0sxPu++4HRsUIKqI4FrS4LSN:WYCZa8dvm3oJPhpsxP5lR+KfUmDN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991198, "uuid": "b383f703-aec8-40d7-8ed4-84e5c01da33d", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991198, "uuid": "a9fb7c5b-1c08-4b34-baf2-7c2165730a83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5836700-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772991198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991198, "uuid": "ebbc3830-2c09-4564-8155-90c8612cfd8b", "comment": "Malware payload (Mirai)", "value": "93e28ccb4fcc457b69f3665725e45781", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991198, "uuid": "bcc574c5-e831-40f4-b6dc-54e15f3edf18", "comment": "Malware payload (Mirai)", "value": "e44cbcfb676e440ce902f502a2d24786e022ee77a8a994dc6d9a5b176d0d3b25", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991198, "uuid": "ddc4719e-d3b5-447f-a6d1-169b299045f2", "value": "T1CFE30B46F8414B12D5D111BAFE1E528E37131BB8E2DF73029D246F647B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991198, "uuid": "9dbd29ed-4685-49d1-becc-f701d8853691", "value": "3072:DHea4CTSUjnwJIXMb6kzz5aTHACdYV8P4eLK:zePCTSQ6IXu7zdaM38P4eLK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991198, "uuid": "8fd88836-5925-46c7-b279-74798b366b71", "value": 144156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991198, "uuid": "25b1f5be-c083-48fd-add6-28a1293185cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5979b78-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772991199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "2fad20ef-a663-43dc-af64-6f4cc8cf3a14", "comment": "Malware payload (Mirai)", "value": "72b10e940f95ba9677219f7726545ebb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "27c5954e-9e8e-4c0d-abfb-a4c533ea10ce", "comment": "Malware payload (Mirai)", "value": "b22ae7391c20c241e08ec2def7c238d7ceb2a40fde9e65db8afa70b010f2a082", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "42971d85-3b55-4091-9a23-c20e46d12b76", "value": "T127D30945F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378695B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "791a560c-ec5f-4d23-8029-78fdd3bb0153", "value": "1536:UFKdzElm18uZJNb4A6Fa8eAZHk4VB7fzTTr71igYSvGueqZvd2UlqKwyw6RNPYTo:UFKp50VU8e947Lb71izSftBdRalK5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991199, "uuid": "9d1823b6-bf53-4e05-ab9b-af3498c9d926", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "edfe3344-5a45-480a-9bce-6bdfe96b4623", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5b0cba3-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772991199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "cb0489f7-7280-41c5-892f-241e90a3780c", "comment": "Malware payload (Mirai)", "value": "111526fd88e599da465e24a92172547b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "aaf33176-362f-4365-8e2c-de0e7124585b", "comment": "Malware payload (Mirai)", "value": "2e9723de53da29335e6983f7daf0b591f9cf9da191980245a0c8c2407a15c063", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "4d7dd16f-e6d2-4dc6-9810-684add1e3923", "value": "T177E32AC7F900DEFAF80AE33648570905B630BBE115921B372257797BED3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "23452232-e479-4049-b853-bc870dd24af1", "value": "3072:GmzTDH86Jl78HenJljAX0Gidw+w9EEVvjbiQLZrEyqKYtf:G2TDH86JRHjAX03dC9EMLmyqltf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991199, "uuid": "75e64c8b-cefc-427a-9f49-06f09604d95e", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "3994b861-6f27-4ad0-b381-e4f02679b3a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5b10563-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772991199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "62f32611-3af7-4047-902c-5dd751342d3f", "comment": "Malware payload (Mirai)", "value": "4f2914a161da6250992f2ec2fbfd663b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "33302a15-ab9f-4f99-ac6c-06497ad08af1", "comment": "Malware payload (Mirai)", "value": "291939293140aa08609a751808396e67984f8e954ebf3779eed667eacb11dfe7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "77d69c74-eaaa-450d-b533-480de58bef72", "value": "T1EED35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "a5f6c33c-8167-4a57-8ef8-e2fb3ec2d7c6", "value": "3072:79eSuygEPjt6qkWqXdKmDnYMb0gBd/gQyVGsdqml62aj:79eSuygEPjt6qkWq4eH2la2a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991199, "uuid": "adce52af-2275-4457-91ca-44580e4a6931", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "56515f9f-2ee0-4b0a-8f4a-97ea630e8259", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5c1d45d-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772991199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "7f43a8bf-94c4-4244-b906-3385a9b37c81", "comment": "Malware payload (Mirai)", "value": "93b8586ee41d4e7124072a98074e2ba8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "3a6a90ae-5991-440a-8a84-2071333786b7", "comment": "Malware payload (Mirai)", "value": "05a8956aad94f820f16bf78b5e320586b415147327bec05b8e7d143191476258", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "17722de8-58b4-4878-b042-d357cdea4f42", "value": "T1CAB35BB3CC26AF98C655D074B0B18FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "e0b50524-198b-4c9e-880f-dd0e768cbd98", "value": "1536:OTW/VCxsHZusQ2Li62C87mKjR5fvPVWARouW8j3W+gJH7t:OytCxsQx62NVjzVWxuWM3by5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991199, "uuid": "17da9437-9c00-47ea-9cc2-4bd594623846", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "2fab6557-d9cf-4a8a-a381-f3a7dd04800b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5d3c7f2-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772991199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "6b2292e8-b3f7-43fa-8dea-f5972d36eaf6", "comment": "Malware payload (Mirai)", "value": "107fe72f1f373ed5997081aac85eddc1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "5110188e-9bf4-4fcb-8731-1e784a89f1dc", "comment": "Malware payload (Mirai)", "value": "aa46b4303ee46bc1369441601c3db01dcc1437c896a5529172627b543593d779", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "ffee9563-d610-4037-839f-f7f12adeb910", "value": "T130D32A06730C0A47D2632EB03A3F67D197AF9AC121E4F640355FAB8A95B1E335586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "292d7532-1e58-4ca3-9613-d7d62c0f188b", "value": "1536:troGHNTUZNilIBUiCxfytmtewMDNna/w4o7lbEJvAhh3rp+JuQfqAg8703p:3mNUiCxttqCwZ7lLhrIg3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991199, "uuid": "a390c0e9-8c4a-4c45-9437-7d47dbc67aa1", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "2213a1f1-0885-4646-a8f7-973026625ca2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5d66918-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772991199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "4e935ecd-b1ab-4eb2-b57f-58dab1ac142e", "comment": "Malware payload (Mirai)", "value": "866dbc310fa1865e19ab627764945c0b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "4a77d076-e9f1-4dfa-b1b7-5772f6e1c490", "comment": "Malware payload (Mirai)", "value": "832300543239f19ce411d79abf1c09907d43672496512c36aeecafa9323b5bd8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "1b83a188-2942-48c0-bbe6-f1229274dc52", "value": "T1F704B719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "aea387be-b597-49f2-b74e-3cf0e33275ac", "value": "3072:nKpzG1eNkSfcQqmav8SqaRVlnYz65GVt:nKY1eNYQqmeqavlg65G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991199, "uuid": "b25b7dff-c99f-41a4-97fe-b0917e5590fc", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "31118df3-def8-4c0f-95d8-2b240c679947", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5d6890b-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772991199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "fe8e0fcf-ef68-495a-bcde-b29388b1dbd9", "comment": "Malware payload (Mirai)", "value": "7c33487e82aac713b4a1209d34a7feea", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "97066548-3bdb-4027-ae74-8ad7ded40ccf", "comment": "Malware payload (Mirai)", "value": "f0906eb7fcc09866de5a4b60306484b56e26b49851c88a40211e21118a45bc1e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "c10a4da6-12a9-4394-97ef-451ba9514968", "value": "T1C804881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "db3da665-f440-46b8-bee2-9cae1cbc417f", "value": "3072:jg57RW7LHZwbq1YSBan1yvbysxr1uGSwI:jglRW7LHZ0Bqyy1BSwI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991199, "uuid": "395ab0ba-b263-4080-9b33-955aed45c804", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "e41dba9c-4d47-441d-a778-cca00260f8eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e629bd31-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772991199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "167e87bc-d70b-4b95-aac8-a3385ef71f3c", "comment": "Malware payload (Mirai)", "value": "2763ae669730bcb5db0b2b4e5173d4c3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "9ac454a3-cdd5-4154-a757-f61d8d40595e", "comment": "Malware payload (Mirai)", "value": "4e0397bca64a379fe67755773f7e85418bc038d5a96770ca2bf5288ec5dae9c6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "b1584e4b-f01f-4a08-a5c7-7b44c5a556bc", "value": "T131042945EA404B13C0D627B9F6DF42453333AB94D7EB73069528ABB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "8690c79a-0796-4e59-ada4-8c733d6cbe5c", "value": "3072:OLe6vhfZQIvuCeeuaMuTuRez43IVILLZQy38YhTfYo+M/RgDlplLn:ee6vheIv1ruaMuTuReErLL738+x+M/Ro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991199, "uuid": "5a432960-264d-483e-b897-13c1eb79ec14", "value": 181474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991199, "uuid": "0e0efa29-2b90-49dc-970a-3cf304eb9c40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd1cc7d9-1b15-11f1-8a4c-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1772991560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991560, "uuid": "09c9da75-4016-443d-98da-3e0cc3eaa7ec", "comment": "Malware payload (RustyStealer)", "value": "6ae48c13af23b2ac3e868be1ba600c69", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991560, "uuid": "23ff8957-7237-4711-901c-67dbcbbd36b1", "comment": "Malware payload (RustyStealer)", "value": "037163afe180f9fd7f5806cfd4b2cc3c513563bcd0a270d297b9bbf09764a49a", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991560, "uuid": "70ec5eb6-eafe-40c4-ab9d-cd61b09cf8f7", "value": "T1F4757C03F69989EAC49EC07883569132FA36B88D4B30B6EF17D41B743E66BA05F1D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991560, "uuid": "0b716a74-020e-4fe8-baa9-e0ad3eec47d8", "value": "eee6504681b54e7c1e64178e0cdeba18", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991560, "uuid": "613f0430-1ca9-4b0b-93a3-ed47418b5c84", "value": "24576:atordm4CDvqqWzNNmpu9IGd8pEarAsKFfv5:at2dm4CDviZNsu9J8+aUzB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772991560, "uuid": "a29daa3c-e275-4b35-bcca-d520ee32d551", "value": 1647104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991560, "uuid": "4bce3a09-020b-4a0f-b699-369c414f81de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ec6c23b-1b19-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772993120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772993120, "uuid": "ffb1e8b1-296f-4407-95e3-aeb14137ca71", "comment": "Malware payload", "value": "9835ce5dcc1bafc7da8b5158da130ed7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772993120, "uuid": "0025d910-ae27-400f-9683-19a8b43815cf", "comment": "Malware payload", "value": "28de14c5aaf0f81257e5d042feb661873229d39e3da319edf08169f585c77d1f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772993120, "uuid": "78c00f4c-8941-459f-8ac4-0158cd699eb8", "value": "T19B42D835B809EE1EED279E5DA17AAF3D40DCC67BC625886CB2DCCA540742CB94B52D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772993120, "uuid": "4712ace5-d6d3-4754-b4df-06b446930626", "value": "192:x8EeBIUOaMnvpZZIPFl8nxhnQjnshcngnqzcpmDUgLD2:x8E2JOasv29axhgsh/kv2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772993120, "uuid": "df60da97-0f6d-433c-957f-4f15455c6e36", "value": 13102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772993120, "uuid": "0504054a-ae49-402b-83be-8293edd6d53b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0e56386-1b1a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772993714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772993714, "uuid": "1dae7faa-afb0-46de-874d-0d0971be4f1a", "comment": "Malware payload (Vidar)", "value": "2ed0aec87d99e89e11977b77c84ffbdf", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772993714, "uuid": "a0e14860-8698-44fb-b5cb-f68b68840969", "comment": "Malware payload (Vidar)", "value": "b1fd47ee66afd27e8f0663a77df96051168b93f0ca032bbbb9544d2b5c74150d", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772993714, "uuid": "a1ad398e-af28-40cb-b342-ecf8a4008475", "value": "T131378C927CAD44A9C57EF0389CA042217A723C5557327BC31E96752F0D77AE82B3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772993714, "uuid": "f1838a63-5378-4c29-84ee-fd14b038f155", "value": "91802a615b3a5c4bcc05bc5f66a5b219", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772993714, "uuid": "5961c88b-ac0c-4b3b-bf25-7a4b6627c611", "value": "98304:FdM29r57L7Zv/2Ly63l70DW2EeWrqh9gHpbh:3Mmt7nZv+Lx14SqWGrgz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772993714, "uuid": "85da05eb-b708-429e-9676-6984e39fbfd0", "value": 23261697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772993714, "uuid": "271559a7-2075-43d1-97e1-d46f25bb09e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28bd5aaf-1b21-11f1-8a4c-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772996465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996465, "uuid": "109d2240-a6db-4bc2-a9f4-eb1b63d290f4", "comment": "Malware payload (CoinMiner)", "value": "03321ba90bef15d389151a53fec8109f", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996465, "uuid": "38be4b67-149e-4850-ac82-adbac435a4a0", "comment": "Malware payload (CoinMiner)", "value": "18a6ab8bab49ab74041d2a61fcebf9a8e0576dde28ff04420f6a9b1bdaeccd58", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996465, "uuid": "f2e6c98e-0e8d-4a28-955e-f03727ac90ea", "value": "T18C4218076D964131FBE40CB1197A424B86BD3DA23BC1E89FB740F94A2DB2760C4756", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996465, "uuid": "a5cac376-8775-4724-b2bc-2c394d644782", "value": "059ef2ae60d092146585018c0d07841e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996465, "uuid": "348bfa29-36d5-406a-b05b-e0e66c44404d", "value": "192:PNATKlXO8PYYleg7zvy7tXpyMJxTZ3lkWScthBsufT:Fi4XYY0AYVZKWScBPT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996465, "uuid": "b0736ca3-017c-429d-b60b-07438005746e", "value": 12288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996465, "uuid": "ffebcafb-284f-4a8f-95dc-c06383a7d983", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e2fc2fd-1120-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996780, "uuid": "51db1f0f-7c45-4b31-9a69-b36678405990", "comment": "Malware payload", "value": "5056a28d3b582277a979f584118f7f69", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996780, "uuid": "99a169d1-309d-4b30-9a77-a8028f3293a5", "comment": "Malware payload", "value": "71d94479d58c32d5618ca1e2329d8fa62f930e0612eb108ba3298441c6ba0302", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996780, "uuid": "5a18fdc9-d131-43d0-90d7-10ceb86f56c4", "value": "T163B27D950588383C3BC989787B9C1F894965B3CF9EA23E44746B3755C12E9ADA70C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996780, "uuid": "674d0fe2-6502-433f-931c-824bceed6aad", "value": "384:I3ow8U2BlUvlB/LKtn4Vmkvotn4Vmkv4LW20M3vgRbqOBABo0i+Zf:Iow8U2PxymVxymz5m+OBABB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996780, "uuid": "3288623f-77a4-483f-a14c-66acf1825ecc", "value": 25103, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996780, "uuid": "d14b37ed-6cde-46c4-8db8-c7247c4a00eb", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25910fa0-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996889, "uuid": "3b4d8ee5-0f35-41f1-8437-60823cb9761f", "comment": "Malware payload", "value": "43368e4a845585f569a4f051b8507380", "object_relation": "md5", "Tag": [ { "name": "Simplerrm", "colour": "#C0ABF3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996889, "uuid": "58d8e827-4773-4c3d-84b1-c6b5753c2cfa", "comment": "Malware payload", "value": "ee21f5c39269e7f98b008dd1d9a0d1c22355959eccb7e830eae0db7ad6462c5e", "object_relation": "sha256", "Tag": [ { "name": "Simplerrm", "colour": "#C0ABF3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996889, "uuid": "302375ac-36fe-4550-8925-e99c8154b65f", "value": "T1B84422CDD2A18CC728010542508583792354FD7EB539AB38FD0ACB54AACBE6CBE1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996889, "uuid": "f946f4fb-bd53-4805-95c9-c6930c5418f1", "value": "6144:CE7aMyKaV+JFvLpiEW7ksoL/V426W5cJQGnJehpqN:baMJjFinNojVH/cuoe4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996889, "uuid": "4fb5ca45-b30d-46c3-8a45-5796020c0550", "value": 268708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996889, "uuid": "a835527b-fe1d-432f-8482-8f63a6281694", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25b43cf0-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996890, "uuid": "ac30bebc-2d10-4fb0-b155-1602653d47b2", "comment": "Malware payload", "value": "9d078ca836218c33141bd58cbef42de6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996890, "uuid": "02e03edd-47cd-4d2f-b33b-55a4376e4020", "comment": "Malware payload", "value": "7cc05e92b0e136218a2e4a3b177b0598d455431a91d556df13e5142875a1d982", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996890, "uuid": "4c10a576-d602-4c9c-8f42-22a6278f312b", "value": "T1BC24122F7859915710986F98DA9C13BC43870713DE13162F867E1F1922C6E8B71F48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996890, "uuid": "c79a00ab-416d-4294-bdc9-66c80d547055", "value": "6144:d9XoNOh39CLijKIgTVfom6PLYU3+0EiBcc1ZBRQb:nXlh3mLIIgm8e0EiOL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996890, "uuid": "f74ddc7b-e6e6-4272-907c-6cb6549a977f", "value": 213029, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996890, "uuid": "43c263de-0061-4d42-b73a-6afd088a911c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25e7ae83-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996890, "uuid": "c0fd55ef-4d5e-489f-aa2d-241ebf70d60c", "comment": "Malware payload", "value": "b1468472048c24b3ce52c2ad98cf02aa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996890, "uuid": "154cd1b5-a1d2-4ffe-8270-7509ef9e8588", "comment": "Malware payload", "value": "8afee97b137d05c863ead946ca0418a47c766e8d6b1c10157755a9917a0ac70d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996890, "uuid": "4892d7c6-6087-4918-b5c3-61e5edb291cb", "value": "T1785423F939ABC7857D0156717083DE2C037AB8B8C8DB5FC3DA2A665C7349C9060722", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996890, "uuid": "d0e22e5f-4380-417f-afa9-619c274aa8ee", "value": "6144:pP2CIVBFFy4oJDsrJ6sflim2VRwsIPckylM8q0s4FBbSM89wBmL78qi:pP2CIjfYJDGfk1ysTxJG4vDygU8J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996890, "uuid": "8d470a76-9dc7-452f-bb01-ec3c09e242b3", "value": 285454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996890, "uuid": "635cd6de-12e3-4c24-aa9e-66338e5ad4f4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26a81d12-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996891, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996891, "uuid": "590ad461-bfb5-49a4-9085-8c12fe7e3a9f", "comment": "Malware payload", "value": "49c4d19ad4d47e2772b375caf1775374", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996891, "uuid": "b402a755-78fe-4246-9118-802a17cc61b6", "comment": "Malware payload", "value": "ece7000ab40456edbc69c1af4bcdb32385c966259c4672f57a32f2ec46c178c0", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996891, "uuid": "22df1ad4-44a4-4c23-b75e-000e087702d5", "value": "T136742345EA9C20D0CF5C6D6C27AE3C93FAA38262990D2D3205A695E769DF1408B39D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996891, "uuid": "5babd9b0-60ca-444d-97d4-412334b71109", "value": "6144:u7qsW6P5FPKFReuDzG390UEqVL732KnuEj9FSruwAWOwJGAZjo9HMd5UoppTP:uGpfwrP9732wrc7rnZ09HMcoTP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996891, "uuid": "f1c27441-efef-44f3-b3a0-c06e0c548bc9", "value": 360892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996891, "uuid": "3d1c21d9-19dc-409f-ab9a-f9fa9cde9a42", "value": "application/x-lzma", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "279903e1-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996893, "uuid": "19902283-2f70-4747-ba9f-3d9fa8ef11ce", "comment": "Malware payload", "value": "3408801d7b12af2304c61df7c2b82a12", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996893, "uuid": "21a0ed33-1550-4195-b72a-7532298fae52", "comment": "Malware payload", "value": "03ac7c26ba6ea0683b638f238233bd82e311c8eff9094a468ba9ffc207e06a40", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996893, "uuid": "6833fe8e-f47a-4622-91f7-0866f926d49b", "value": "T12F26330E5EC6F0849C732EAEEBFC566E650201CB82CDF497934AD2465756323B6E0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996893, "uuid": "b219ffa2-e65a-4271-95a7-b8341c57dfbe", "value": "98304:UiRtGk4FYsfjd+K4Bxtp74XdipoVHfvVON+Hqp4DwGbUba0I+qY/s:RwFYsrdP4L8XMsHf9O7WUNI+BE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996893, "uuid": "4e8e8814-4784-4b82-acda-b733946e2f03", "value": 4834336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996893, "uuid": "0c0ced5c-5d47-4a70-9a0c-f9d25aedd5db", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27bb6195-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996893, "uuid": "e2692712-8125-494c-95be-22704bc0ac97", "comment": "Malware payload", "value": "d381b6539d418ce274ee1d7fd83c55e1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996893, "uuid": "ecca2ca8-13fe-4b09-8ecb-84df548ff05b", "comment": "Malware payload", "value": "36cea4fda396e3942fa8ae60d98364e2ba844be1df92159033c21c178baaac9b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996893, "uuid": "31e16b3a-2789-4d8a-bdda-c4627e3b6c1e", "value": "T15EE5331C0ED66CEFAE52BEB8EB521BF970089DFE5531958AC805B910ADE4FE38D101", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996893, "uuid": "7b22d4ed-c538-47f2-9f7c-eecebdea5dd0", "value": "98304:XPSrRFAGU4LayPR8puxACIwBjxIJqDfririCZM:XP6RF/HFZxvj2oTIVm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996893, "uuid": "7522ac8d-bdbe-4d67-96bd-6b5dfafc3eca", "value": 3208849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996893, "uuid": "715a4778-fd73-4979-b6fe-e90bd79f65dd", "value": "application/x-lzma", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc8afa76-196a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (AteraAgent)", "timestamp": 1772996895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996895, "uuid": "6c3201ae-edaf-48a7-8966-a349da0352eb", "comment": "Malware payload (AteraAgent)", "value": "241918f70447c5870d3ac2fc8593c615", "object_relation": "md5", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996895, "uuid": "6570dd04-d5a9-4bc2-a6d7-cbdb841352ac", "comment": "Malware payload (AteraAgent)", "value": "42b9d965bbcdbcd98dd4104379e46b23c5238fe4dc23b3ee5cf8689435ddfd55", "object_relation": "sha256", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996895, "uuid": "2cfdf487-7f95-4733-a765-5901273d2c9e", "value": "T1AF862318FBE009AEE5778276C56A8520EA327C8D3720C54F47A4B6295F3B7A075BF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996895, "uuid": "5ea9a55a-095d-4155-9be2-1c101cd10393", "value": "196608:WW/FAmnGYLnWgziirlb4/ieF3GrAfedpvCs3md8r:RAqGYLpZreF3G82yc6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996895, "uuid": "f20f98c2-5b01-4ac2-8136-5c7e2733caae", "value": 8601600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996895, "uuid": "ac95c7e2-a4ea-4c45-84bf-6f65fd665ff4", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82def6d0-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware payload (AteraAgent)", "timestamp": 1772996897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996897, "uuid": "bc400feb-bdff-4a28-8003-f62efb40fe80", "comment": "Malware payload (AteraAgent)", "value": "063e7372a2a99fa35745f41904d188f1", "object_relation": "md5", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996897, "uuid": "197bac79-0f6a-4d50-9782-fe12398163d2", "comment": "Malware payload (AteraAgent)", "value": "3077d335b4d51417fac291f1ce9cbb61ecc8cd893194a0292b0f2be5bcf45ad3", "object_relation": "sha256", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996897, "uuid": "432693de-a25c-4776-95f4-0015a08ec215", "value": "T13A862318FBE009AEE5778276C56A8520EA327C8D3720C54F47A4B6295F3B7A075BF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996897, "uuid": "8fa91c7e-6a0a-4bf1-b8a6-c92d4e690755", "value": "196608:3W/FMmnGYLnWgziirlb4/ieF3GrAfedpvCs3md8r:qMqGYLpZreF3G82yc6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996897, "uuid": "000511ab-7971-415e-a08f-2c4e17be9fa0", "value": 8601600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996897, "uuid": "cad7fa0d-7a0d-45e9-bff7-083fe647abe4", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a596c79-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996897, "uuid": "5ea392db-63bb-4b61-83e9-289dd2cfa775", "comment": "Malware payload", "value": "0dfaf3ca6c20a2f73beb9d6d5c35de4a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996897, "uuid": "805e5d98-37d2-4eb7-b00f-add9a68810e5", "comment": "Malware payload", "value": "6ee1825faf5908b3a40bda3789c07ee9de59494cd583d353bc821b2c9a230f2e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996897, "uuid": "4912dc35-85aa-4cb9-bb5c-fbbc0a99be13", "value": "T1636423398DC4A071C1EAAAF024F436736AE6C2532DEDA9D223354B85B5DCEE365D14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996897, "uuid": "203ec30d-8b17-4fd6-ac76-826c88f9e270", "value": "6144:xoS6MLgiLW3o4UD7HCFtnyts6CQcEpSQUsD28vsNZ3uBoUFVfbadKdsl26+:xCcgi6xUPHqnY1CQcEpSQqKI1SfbaM2G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996897, "uuid": "854b0578-b7bf-4703-ad58-1fb63ea09ead", "value": 308636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996897, "uuid": "01a428e7-2bf1-42e4-a335-179f2552d266", "value": "application/x-lzma", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d13c425-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1772996902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996902, "uuid": "6fcfe1bc-2251-4523-96ca-3acc7a8bd937", "comment": "Malware payload (ConnectWise)", "value": "8e53b6e7bdd8497aa5c44566c7824fea", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996902, "uuid": "20d8cbb0-e49b-4b14-a775-307df8a9ffa2", "comment": "Malware payload (ConnectWise)", "value": "031caff251d344ac20ae5ef886e828cc46a3582f61c79e13fb83fe04b97e44b4", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996902, "uuid": "07c7bb9f-31de-490d-a69f-bfa16e8181ac", "value": "T1F5C623B127E98425F1A79F39EE3A89E229387C64DA16C45F0BB43C0E1971E509B713", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996902, "uuid": "40d7d4bf-efbe-4ae9-9d96-9c6b8aa38b2f", "value": "196608:bKaLNkbgqi4QyKaLNkbg+KaLNkbgSKaLNkbgTKaLNkbg:TWgqiHEWggWgkWgrWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996902, "uuid": "2ed0156b-8cec-47ab-9de3-8d4db6db9045", "value": 12185600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996902, "uuid": "51941d98-104d-4fe9-aa2b-2d7ba582b5c1", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30a6ec4b-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996908, "uuid": "b7beda5b-4f40-4074-a80e-9bcf3203167a", "comment": "Malware payload", "value": "5d2cf7aa9c8490af5ebebb2a6e65be1a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996908, "uuid": "4b79b541-5c2a-41b3-9657-7a40c3ff590b", "comment": "Malware payload", "value": "470384e7e017a0a12d76ca95db21e47f24414673d9d4097ddd41922f46d80bd8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996908, "uuid": "66fa47f2-1426-467a-9cb0-4bae4e0ffef8", "value": "T10E261242FF68E62FC87780330AA6067512468D5EC642E70799ECB35868F7AD85FC5B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996908, "uuid": "b8940788-799c-4f6f-abcc-faf789a1d294", "value": "98304:jQFHxc+BLH9b7hXjQLNfs8AjfHmF7VhzN24OqMyZgYr3+34s:jQ1l9nhX0LvAjfG5p2uZgE+34s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996908, "uuid": "840d30ce-a432-4a08-9fd1-119dcbf18fbe", "value": 4608038, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996908, "uuid": "5eb34a4c-9bcc-4f98-aad2-fdb75312029c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30e863c6-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996908, "uuid": "ea1dce15-7940-4371-8019-54aa1a67c861", "comment": "Malware payload", "value": "580cc4d52b711a23d80bd27b15d20375", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996908, "uuid": "9d8bd241-2e03-4b57-ad7b-44396aa2338d", "comment": "Malware payload", "value": "557a1f4d06cc44ef995f7b6b0f80581bbcea6a54daefb76dc54c649ad999768f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996908, "uuid": "77698290-4270-4c58-a1bf-00aee23734d4", "value": "T1BFA7333F7297643EF43D1A36B97252608D3F6A62A0524C12DAE4840CDF261B11E7F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996908, "uuid": "873f8e25-6c51-427e-be9c-38958efa9f17", "value": "88016fcdef7f227c62171d0afad9aae4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996908, "uuid": "eba25ae7-78d6-43cc-93c3-dcdefc589086", "value": "786432:/JqnV41J1unluVN63oYwhZ30B6f436kI/q2RJiArpX0WN1EmjQ+zhYQbBmY/XkN:UnV45W3nakF3nSZxrl0WN1EmjQYzFhXQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996908, "uuid": "c3a4c881-b293-4b27-939b-2ad394b7c4c7", "value": 44947606, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996908, "uuid": "cee3535e-2589-4d7e-84be-e8ce70590c58", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30e90169-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996908, "uuid": "9d866d9c-10c9-405c-abdc-b2ca9c79409e", "comment": "Malware payload", "value": "57d03da440601c8416b68bb866f2c416", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996908, "uuid": "a0ac6b49-2f7f-4ed3-824a-4b45c91c1bf9", "comment": "Malware payload", "value": "98e1d5c4c12c851dd12327d0f2613d8c560de00e14c23bda3b16b7d99d187c40", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996908, "uuid": "f1fd1650-8a96-4e1f-b714-f41d480115ad", "value": "T10A663362F43127F1AF25D37D897AF70F25CD00CE7A39B74AA93D8C239A1B41AC6915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996908, "uuid": "382d7369-3a54-48fb-81ea-89264eb79a74", "value": "98304:TsR3tFb3Eo/9ekH/enzr0b3zKm3ibB7vXDVONx1egs7kRmyCAyAuxus:Ts5b3Eo/s23zK22XDVO1izAkL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996908, "uuid": "5e929931-2819-474c-847e-82be30edca5f", "value": 6498484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996908, "uuid": "7c15a40c-7747-451a-b975-53aaa1fc3247", "value": "application/x-lzma", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33829c7c-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996913, "uuid": "187833d4-d85e-4604-b930-0a8fed934750", "comment": "Malware payload", "value": "d4f5a6bd2f4d9264be301e5f197deae9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996913, "uuid": "f23f0cf9-b224-47be-b1ca-fbfd684df07d", "comment": "Malware payload", "value": "741953f262f26213b67b85e0c4e8592bb580b894c69b842b80f3b45c8d13eba9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996913, "uuid": "63f2082a-3a52-482b-8fd3-d02044341421", "value": "T128F633D935EC503FB88F96652037902E127CA24E37E069273E72F527D599B1E2A3DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996913, "uuid": "83a840e5-1abc-4c42-a490-d3153b4653db", "value": "393216:MlZoSUFNgCMOhVoBaAiUNaL70q1uzCJPeT8FJJ:Mbo/qEVooAZNKYeJPeTej", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996913, "uuid": "7d3c9d9a-71da-4921-bf8d-0b1b37497ff7", "value": 15643274, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996913, "uuid": "5c7294a1-02a3-4e15-bfc1-dd5d9ce47be8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35d61862-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996917, "uuid": "4ff9e272-1b14-43a9-bb22-2b751387d30d", "comment": "Malware payload", "value": "5be1e0cde4a3e2c8869064f451defd26", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996917, "uuid": "7529bb38-ab0c-451f-a5eb-d7e2393e6d60", "comment": "Malware payload", "value": "97792288fb6bcb220402499cb5b2fa8092584266a7fb1e34eb230731542fb34b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996917, "uuid": "d641063e-ce60-49c0-a8fd-54dbbdc9de65", "value": "T1BFE63320D1B6B779E6497256B5A281C9A3DEC1EB94430B94E0DE0EE54D883FC8FC3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996917, "uuid": "263ce298-2077-4831-9fe9-325f1524d626", "value": "393216:BeCQL/IFGohs872Sa/q3TiQ8UNFUik23q9g1:UHjIF5ZySaSYUNFXk269g1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996917, "uuid": "8eab786a-8bbe-4357-abc8-9bab17fac057", "value": 13966919, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996917, "uuid": "d4ca9d87-c7bf-4106-bee8-1e5b3959817a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36639a50-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996918, "uuid": "e05c871c-cf61-4669-bed4-0e82e68042a8", "comment": "Malware payload", "value": "6bccfe65d81aa91ce17d86f6e6a682ce", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996918, "uuid": "6e5022e6-abfd-4e62-a55c-db4999f897a7", "comment": "Malware payload", "value": "db84ed3ba750feda07d29b3fa9ff4e0bdc209b2ca1a75d9c49aa6871c2c4c434", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996918, "uuid": "d5b8e4a9-14bc-4d2e-a71f-4fe8bfc9dab8", "value": "T14187331AF39599FBDE33D0FCC0854447EA9678E54381422717F085EA4E606E98A2FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996918, "uuid": "522fc934-4587-45a8-8a6e-1d674a2300d4", "value": "da7539752d4292fc084c7d813366cc8b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996918, "uuid": "28500081-cf70-4a6c-9564-c97dfa5bfa42", "value": "786432:/rKU6DT0ucbTbMv22zAeV/X+0tdshTc3XyPteDeCOdeuKF1bd:/uRf+nAu2FuQd73XyFeDMnKTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996918, "uuid": "0c222e2c-3a3a-4db0-8fb8-87b3d9b25982", "value": 38833672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996918, "uuid": "fc9875b4-5efd-47a6-8013-0bd7b3def7b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39bcafee-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996923, "uuid": "3e3d985f-ea8e-43ca-8390-851aa519b13f", "comment": "Malware payload", "value": "2206848b3bbcfd0007a37d6c29e13ce2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996923, "uuid": "ecd2561c-46b3-41ef-85fc-d962e4671a29", "comment": "Malware payload", "value": "e18609ae002c08559dc737e4f3e889082f6446592aaf9af48e63597309918de1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996923, "uuid": "4ac6c2b9-cb73-4e00-99fb-87b236c1a905", "value": "T10097333266585C39D90380BC528B76E2FF69BCF71290B12B2BF07ED59E70A90451E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996923, "uuid": "b1aa207e-8be3-4418-873c-da4c7d475f22", "value": "786432:pcq1mOf/ss3LmcT2vvifJjeBarw7xqyPteDeCOdeuKF1:pNmOf/1acScN62wIyFeDMnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996923, "uuid": "d556c0f3-a6a0-4b30-9e12-d55541676d85", "value": 42851241, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996923, "uuid": "afa00d89-70af-4558-9d06-d9255f96231c", "value": "application/x-apple-diskimage", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c68891a-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996954, "uuid": "c186fed4-c696-4d9e-b91a-9b28b96857f3", "comment": "Malware payload", "value": "4f37aff17f7f3f6947699e18f262d3f3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996954, "uuid": "c9cc9f78-12ce-4917-9d0f-0ffc13558281", "comment": "Malware payload", "value": "f2e19fc34ba837415b5e7cf44fe1be8551e6ce7ca9f5ab6401e461918e81d169", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996954, "uuid": "69538c60-779d-4bc4-bfb7-22375ba91850", "value": "T19C97333266585C39D90380BC528B76E2FF69BCF71290B12B2BF07ED59E70A90451E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996954, "uuid": "70908ebc-e56f-40c9-8756-83de2d3ce77e", "value": "786432:pcqBmOf/ss3LmcT2vvifJjeBarw7xqyPteDeCOdeuKF1:pZmOf/1acScN62wIyFeDMnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996954, "uuid": "deaac6c1-98b0-4038-998d-ae8c407597b6", "value": 42851241, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996954, "uuid": "3f64f8d2-cb15-4735-ab3f-d91eff874259", "value": "application/x-apple-diskimage", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e9c010f-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996958, "uuid": "89274f1a-709a-45fc-bf1f-872c4f5f2c8c", "comment": "Malware payload", "value": "9580e0c86b8d501fe41b17c20666081d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996958, "uuid": "01772b7b-be1f-457d-a59e-70a3689a6a0f", "comment": "Malware payload", "value": "139b2c9e9eafe920affef7f6c7140140d8f0a3cb39a8edc1254d6e3270eaefa7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996958, "uuid": "72004b8d-3f65-41bd-bdfc-796c4b5844c4", "value": "T1F3A73336A6584C3AD917D0FC568B75E2FF25BCF70190B11B27B07EE49D70A808A1E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996958, "uuid": "ec3164bb-0825-4cb8-8cf2-ec160ed28f41", "value": "786432:I/ZTdHgDgKEFDzvszKC9teqAR31ynLA7MKyeqQAuWtyPteDeCOdeuKF1:I/ZxADLxte131ys7ZqvyFeDMnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996958, "uuid": "0f1ad18b-dced-4643-a16c-867b58b2ed65", "value": 44358863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996958, "uuid": "0f322e0f-0843-41c5-94b6-53e3aad25ad4", "value": "application/x-apple-diskimage", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ea4a5ac-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996958, "uuid": "cdd8b7e4-5e0d-4836-9f6e-c1be9aac0589", "comment": "Malware payload", "value": "a50105bf3d66a82162bb74974c2382a1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996958, "uuid": "2ca259bf-c943-4522-816f-1f3379643f3b", "comment": "Malware payload", "value": "bdcffa4dc4c198d83620ae390b65b88c9eb1ca5d474259a8c377fba255d6ac50", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996958, "uuid": "58afc138-a9d3-4b19-b32d-37c729f2f27e", "value": "T14197333266585C39D90380BC528B76E2FF69BCF71290B12B2BF07ED59E70A90451E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996958, "uuid": "00980666-b57f-46dd-91b6-b3a889f7e7fb", "value": "786432:pcq8mOf/ss3LmcT2vvifJjeBarw7xqyPteDeCOdeuKF1:pkmOf/1acScN62wIyFeDMnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996958, "uuid": "66b6c0bc-d8f3-4f41-b6ea-517eaa991386", "value": 42851241, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996958, "uuid": "bbca6692-9806-4af9-89a8-40a0d176a7fd", "value": "application/x-apple-diskimage", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eb32e57-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996958, "uuid": "d80ac915-9635-4abf-96a0-ebfdf3916208", "comment": "Malware payload", "value": "dfd2c84aef06aed8ea9e73cc108772c4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996958, "uuid": "b656d238-263c-413f-ab24-1d238b72aef0", "comment": "Malware payload", "value": "22b930458003b8df9770bbb73816c8ef2c4f3da0ea6e24f40707b22915e2d61f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996958, "uuid": "8033e4b8-a11a-4cb8-99c0-132ec49fe5cf", "value": "T198A73336A6584C3AD917D0FC528B75E2FF25BCF70190711B27B07EE59D70A808A1EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996958, "uuid": "e478a80a-be44-4d28-b1f2-33619fb16f8e", "value": "786432:I/ZTTHgDgKEFDzvszKC9teqAR31ynLA7MKyeqQAuWtyPteDeCOdeuKF1:I/Z/ADLxte131ys7ZqvyFeDMnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996958, "uuid": "c3cc4f70-41f0-4d81-84d1-7608292741cc", "value": 44358863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996958, "uuid": "5a2ccdf0-6618-4904-b072-83fa51f573bc", "value": "application/x-apple-diskimage", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55112e5c-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996969, "uuid": "c97db336-da68-40e9-9dc3-62902df1b60b", "comment": "Malware payload", "value": "f81f8a8c2b9c2786d77d337005989bfe", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996969, "uuid": "468bcb3a-5359-4f38-ad9e-bcc9a94e739d", "comment": "Malware payload", "value": "b9b05b5a8a6796ef40b1186036dc7ec26f9c1322e0a1001c223353a4afa5d41d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996969, "uuid": "c78acceb-6b91-4bef-b47e-2799688e4bb3", "value": "T184973332A2585C39DA0390FC528B66E2FF69BCF71290712B2BF07ED59E70690451E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996969, "uuid": "d4c2f2e7-c899-45cc-881a-a07c9c2e4aa1", "value": "786432:pcqHmOf/ss3LmcT2vvifJjeBarw7xqyPteDeCOdeuKF1:pvmOf/1acScN62wIyFeDMnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996969, "uuid": "172af503-a8cf-4226-a093-f55820b297ed", "value": 42851241, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996969, "uuid": "a56b123d-3128-450f-bcbb-0589639e955e", "value": "application/x-apple-diskimage", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "555ec2ec-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "aab4447e-af7a-4755-a393-5a097990d7a5", "comment": "Malware payload", "value": "8ef9bb91ff2c79d1055d977a5081a88e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "3d50ddbb-2bfa-4ba3-b50d-4c8323881fff", "comment": "Malware payload", "value": "50c819ffa8faa957abe70bdf4658ae0a0c0a2188172dce670d00e6b5e34308d6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "629df478-4e37-4bff-910f-b3601a93ecb2", "value": "T1D3A73336A6584C3AD917D0FC568B75E2FF25BCF70190B11B27B07EE49D70A808A1E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "f515e212-0dbd-4824-97b6-e8708e84ddb9", "value": "786432:I/ZTyHgDgKEFDzvszKC9teqAR31ynLA7MKyeqQAuWtyPteDeCOdeuKF1:I/Z+ADLxte131ys7ZqvyFeDMnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996970, "uuid": "641432c1-a2bb-4821-a7dd-e0ffd69ebe9b", "value": 44358863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "a6d0c3a5-23e5-44e9-80b1-6500c294e458", "value": "application/x-apple-diskimage", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55789216-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "8f1f4571-63ab-4680-8a10-ec8eca8679eb", "comment": "Malware payload", "value": "50f4acd5a8322610825c9dc28e4fd661", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "3d361601-d000-4ead-9469-90f847fc91ee", "comment": "Malware payload", "value": "c9af05f04be24f3e76ee7cea47246342485f308e74eb1631090998ec8a485f71", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "2479e114-dbb2-40bf-9d26-39a1f5e95eee", "value": "T1B7873315BED1A9BFEF2355FC9106C5C7AE9A88F601C1816317F049E7CA200D58A1EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "6cdd4c4c-50f2-4c7e-a5e6-289fe588e868", "value": "ec3d55528df9b48ff8e5d2ff74321ad6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "bcc511b8-7d0a-4d05-b43d-4b524c4d16b9", "value": "786432:6FRMs+NfBqnzM07m3DR9qd3z9JY8HKw6DyPteDeCOdeuKF1bvYp:6FKFNYg078DR9qd3xC8qwayFeDMnKTvc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996970, "uuid": "c8528e45-cb5b-4aa7-903d-5d9748f33a38", "value": 37194864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "73c15322-824c-4d51-8bc5-d7864bc3e71e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5588f1e3-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "6920db54-48a2-46eb-abc6-bef592bf1aaa", "comment": "Malware payload", "value": "c778e6992e081998beb5fe83d9260c64", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "54d56004-5c3e-4021-8131-bc04feaacbe7", "comment": "Malware payload", "value": "99c38f11c44f215df04ceb99edd5740189f285fe3bc53a2401c95ab01f766065", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "bac1545e-48cb-4147-a053-53681f3a6386", "value": "T1FFA73336A6584C3AD917D0FC568B75E2FF25BCF70190B11B27B07EE49D70A808A1E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "c64d8205-a2ea-474c-9f64-c14f00369f9f", "value": "786432:I/ZTxHgDgKEFDzvszKC9teqAR31ynLA7MKyeqQAuWtyPteDeCOdeuKF1:I/Z1ADLxte131ys7ZqvyFeDMnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996970, "uuid": "f64a468a-58c7-47d4-a747-2184d955e8fe", "value": 44358863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "19239f15-a437-4dc5-8f7a-dc8491dd33a3", "value": "application/x-apple-diskimage", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55a7685f-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772996970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "2a7cc770-1864-4646-9580-9ea2e3e2b640", "comment": "Malware payload", "value": "8112ce27a0ad5be8340279499a62bb9b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "124ab03a-5658-48b0-8037-786e6fe15025", "comment": "Malware payload", "value": "7a9e4a60ccb9c668e0128bde2a8a918d20b82756472bb76c17c15d3a1cde5b79", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "5206cf8d-1a53-49ec-ae0f-49ee042a9d3e", "value": "T1950833D6E7E8DD9ECA7760364B0906A523608D21C643DB0F9175322C2D737E9EF086", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "e5676247-daa8-4a57-8b65-4697268fee16", "value": "1572864:bfYhlDL0Z5nGMOYNEZ5RTS1REMBw8qfoaHL4eQdplcijwlAg3okDG/PewM5AasxF:bqDgZ5nNyRmfEXwQILElAGo/OwM65xF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772996970, "uuid": "d443fbbb-fe3a-4b75-baae-049c951fca95", "value": 82495946, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996970, "uuid": "36a9c3a4-d226-4aca-b485-40d671e93eea", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44ff8c55-1b23-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772997372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997372, "uuid": "f16e8920-58ca-42a2-a25c-c4333d0bfd46", "comment": "Malware payload", "value": "50ee229d9e414e28c50693eb64e6f39f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997372, "uuid": "2d15c722-e2df-40f4-9e8e-f800bbee462a", "comment": "Malware payload", "value": "f15f37f036b5f6871976c6152313b311d737ce3600e5307adcdbf3794828d113", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997372, "uuid": "c99bc39c-cba5-4baf-a338-8b2dd04e45b1", "value": "T186F49E1AB2A802FCD0BBD1B5C9534A17D7B1F84A1331AB9B43E05A962F376606F7D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997372, "uuid": "68d477ed-201c-4ffa-b74d-604af8fe5e35", "value": "c5c7e4d2a8d755721878e9ee0a95d529", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997372, "uuid": "fdbe99db-47f5-4dfa-a8fe-e08fc9c17ac8", "value": "12288:/pca0g0UG2ZyJpKSq7AEr1+qeHGcpLubMRu2LCDAxF:/X82Zw0SEAEr1VwGgubMfPx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772997372, "uuid": "64489a8c-68b0-407f-8df5-ecb326b7fb67", "value": 733184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997372, "uuid": "465d3aa9-324b-4f65-9bb5-7b3b816e0288", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57ef5da9-1b24-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772997833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997833, "uuid": "04e5dae7-9700-4426-b111-a91c366a0e9f", "comment": "Malware payload (Mirai)", "value": "4e06b5d1de35ba10a7e1210c446383bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997833, "uuid": "b9068750-1d99-4d9d-a22c-e96c2c52ae27", "comment": "Malware payload (Mirai)", "value": "dcb445475f9c1f904eef13fb0f30d82b8d9c6af3a10659af2240d73dd9f26e92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997833, "uuid": "255f7f93-523a-40f9-8e64-e6e5dcf51515", "value": "T16D13F1B797437CAAE82336B671026780DE785412AA475B3F046172EECD78A973F244", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997833, "uuid": "6868d329-e395-409b-89af-a345bb4f9cf0", "value": "768:hd6Rhju90wsPHrbfNfGbhdVDFGXmmdArRQxFMqPmvhkz3UcNY0TGa/pNGa+EZx0c:hdSw3sPPov8X3amFTmvhGXtLJ+gjx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772997833, "uuid": "88c6cd38-9398-40f4-a7b2-da91aa0cda76", "value": 44540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997833, "uuid": "06ade8a8-0353-4229-975e-c13993a7440b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f38ecf3d-1b24-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772998094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998094, "uuid": "a085f4a5-9ab7-4757-a0de-7c279d5efe8e", "comment": "Malware payload (Mirai)", "value": "0e1061f968212454d80c2c388de40da4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998094, "uuid": "940bc20e-bada-47ef-b2e8-9647f914d87a", "comment": "Malware payload (Mirai)", "value": "f7f115792515fc1264a8e88377369f8be22b4733030a3d97993c3a7315c2d4ae", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772998094, "uuid": "fb0d4c74-7abe-453a-afd2-70977e643cb0", "value": "T1C716231A1FAF985AD2A059F09AB1C04FE171FB7407BB4713EAB55839C92B7C13D267", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772998094, "uuid": "4b3abc9b-2894-460d-b293-3a4a3db94750", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772998094, "uuid": "449373f0-0fcf-4b72-b010-a8f8c064fb45", "value": "98304:jgZPyyinxZFpNFza6k8qPYPuvUZ9F8zDD:MliDHzabXwPZTF8zf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772998094, "uuid": "73626009-ebe9-4cfb-80d8-1883aaa69f12", "value": 4127744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772998094, "uuid": "5875c35b-9815-45fc-9beb-d154a1bba163", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1556f0a2-1b25-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772998151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998151, "uuid": "6671c35d-7ae5-4d7c-9f64-664b5995bb65", "comment": "Malware payload", "value": "b6e16641d04fc8c94948f7df57a46305", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998151, "uuid": "b55ee3a0-995e-4610-922b-c1c3d06b9984", "comment": "Malware payload", "value": "75eab00fd7dfa9eb412ca440c1311d260fa06d8e88dd7e5e4631b66db520b3e1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772998151, "uuid": "8511efed-f3a0-4d35-ba34-696dbc72f047", "value": "T14B1633524D7998023886F549E6630B1A37707E3A1D5CB663EBC99DD83352C812B3CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772998151, "uuid": "9d6b4801-ac85-41f3-a1a9-6d46b773936a", "value": "98304:QqxEKj19mXk3WTFRFIJR7/4FN/tCLyvqD+5ljkUrTP7vFj0vhE1AtI:QqxTgk3WhIH4n/ouiD+UWP79QL6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772998151, "uuid": "722aca84-970b-4272-a39e-46879a4285b5", "value": 4128528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772998151, "uuid": "db06a86c-e280-4280-b22c-bf149a69aa84", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "556b9070-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772999976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772999976, "uuid": "4403cc33-9c62-4e8b-870a-54e1d40d2bfb", "comment": "Malware payload (Mirai)", "value": "358c537f15fe406875292e9453c4c64c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772999976, "uuid": "0f217c64-a54c-4b11-bdce-0b7ab7e3fa16", "comment": "Malware payload (Mirai)", "value": "a18891f23add11fc828efbedcaa438fb4a8d77f08a051b101b63cbd18f156f90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772999976, "uuid": "d213b906-9661-49f4-a5bb-d6ef3f0decc8", "value": "T1E113E0256AF80E40F06111BD4A9A2C8D0694E3ECC4CD9D8789E07536BCE27399B6C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772999976, "uuid": "241e6bb8-7684-4250-892a-2aceb5f76cdc", "value": "768:r7lMBJB34XAKVvp+GMhFkRNtB74cLj8lMwj6kJjPivXVD1b+ODjnbcuyD7UHQRjX:ro73X8vp+GsFk/75+J7oXVPDjnouy8HU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772999976, "uuid": "0426f5a9-744e-4e35-989f-e175d718b5ec", "value": 41764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772999976, "uuid": "c0cf8493-a7da-44a3-92ee-802fdf482e22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0064cff-1b2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773001846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773001846, "uuid": "a297193d-4b1f-467a-84b1-cbe46a23dc67", "comment": "Malware payload (Mirai)", "value": "1592eab0447b7ea9946802cb961e29a4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773001846, "uuid": "e3170483-5354-40b9-91e0-1d8ee8b0e348", "comment": "Malware payload (Mirai)", "value": "76ed4a7b19eb775dc5c0dc1972249303575928f25f683c3810662703757c7daa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773001846, "uuid": "512b92ba-f991-4ce8-a1f2-6a3b74a575ca", "value": "T1B1B32859F881AB12D5C625BAFF4F419833530B6CE3EA7212DE208B3533CAA5B4F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773001846, "uuid": "adac36e3-d2d3-4114-b6aa-73d515607579", "value": "3072:0NAkHBoN3lAha+xO2qxdimTUfjcq8N/iBg:rN32ha+xO2qHimCclN/i+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773001846, "uuid": "c4e1056e-9d63-463b-8b8d-a9b3691c8dd6", "value": 117396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773001846, "uuid": "d0983164-eaff-42c7-964d-59b7ac544fef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e44297a-1b30-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773002917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773002917, "uuid": "bb759c5b-98b4-4ecd-9579-0acaf5b27250", "comment": "Malware payload (Mirai)", "value": "348e29cebdccd01f98b174b12384d8ca", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773002917, "uuid": "eee4c47c-935e-403e-a042-240056f879cd", "comment": "Malware payload (Mirai)", "value": "819fd104b07c19c1ec5c83727a7187b90632019a1d06117d6906879bfa3f81f1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773002917, "uuid": "db7cc400-93ed-43ed-8ece-da4d9520ee0a", "value": "T14BA34A237A324D3BC4C0A13632E75326F9F643DE51B8961EBD701E8CBB69650321B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773002917, "uuid": "77a2e376-239f-40ff-a550-ab12def9ea7e", "value": "1536:ZZVCTO1tWll6v3WgtWIzkUVbtVEo75K00kyStUyGe7ya:Z46OodbEoV3Sa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773002917, "uuid": "3d2cd429-c01c-4b5e-b7f4-40ac46bfe29e", "value": 99684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773002917, "uuid": "746ac769-4e90-4de5-b0e5-a11c8d9a7b60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea563fae-1b33-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773004521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773004521, "uuid": "10b0725c-dba8-4ceb-923f-3802dbfbd7f2", "comment": "Malware payload", "value": "8e33cd7f9a6ec19439a32b7aab396b2e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773004521, "uuid": "5d87bf14-555d-4fe1-b4fe-88e1020c3f11", "comment": "Malware payload", "value": "be32a179741d8468d92e3768c661c70065bf6366c215312dab7f397c567e3c71", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004521, "uuid": "32653af9-4b00-411e-8808-270b3af1aead", "value": "T1E622BFEF405115AA1EC76820B2ABCD15ABF8A991B96CCC74EF433D4F208423177BD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004521, "uuid": "dcb09022-2e6d-4ad9-b047-96c9180eec2c", "value": "192:RF4we8S9wiYRGCTF2tqjddmSfGreZw0hGv6P4Tu61T27JLFyF4NWOch5gfGfE35G:/4T9YRGCTSbvvi4TT1T2aF4Kar5G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773004521, "uuid": "4a2f77c1-9756-4ec2-b691-b72e7a8e6aa5", "value": 9984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004521, "uuid": "449ee62c-300e-4c34-bbba-9efe45229bfc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9966742c-1b34-11f1-8a4c-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1773004815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773004815, "uuid": "cd14aad2-b124-4091-bf93-769042680b5e", "comment": "Malware payload (AgentTesla)", "value": "d86b438e6aac9a485e389a72cff6a68c", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773004815, "uuid": "e4e73c71-dde9-4ffb-bd05-7449585d5a5b", "comment": "Malware payload (AgentTesla)", "value": "3cb361c8d76707076736f6c397058726ad27f49198fb7b7a1163a70b5be60c69", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004815, "uuid": "e6306a7f-4e31-4aa7-b72b-44a88b282c46", "value": "T151660107F24A5AE5C079C235C28B6201FBB178915727E6CB668017922F137F8EE3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004815, "uuid": "8c197be1-9b85-493b-8539-2aa6718c0e23", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004815, "uuid": "43b54c6d-b45a-44ae-ad40-3edd605a95cc", "value": "196608:l8Ua7fas/5OaZDlRMYhmiVnNOKaP30dlTps2xB:l8H73/5FZBrlVn8vPIlz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773004815, "uuid": "d9bc59f6-f717-4e95-96d6-6105a304905e", "value": 6844416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004815, "uuid": "163240ab-375e-4ccd-aeb3-a5cd47862499", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773009378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009378, "uuid": "b8b3847a-e389-485c-b9c6-113a55026aa3", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009378, "uuid": "6e3e92d1-33c4-4fc4-9330-50d768fcde16", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773009378, "uuid": "b66468cf-145d-4f64-a3e3-58079c0acef2", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773009378, "uuid": "d5e3956d-6b16-426f-84ab-5d43f444dbcb", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773009378, "uuid": "f7ecadf6-ea65-43a7-8d90-a9cac08d00e3", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772928129, "uuid": "0d28be0f-1a82-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://creek-base.shadowcreek.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772928194, "uuid": "3435f80d-1a82-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:46253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772928427, "uuid": "bec2c9d8-1a82-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://shad-net.shadowcreek.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772928671, "uuid": "5003e95a-1a83-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.228.109.209:45938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772929087, "uuid": "48634ed2-1a84-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pgubdbmp.austeritymorg.digital/?=check&&actmn=YjFdVRNSzYRhjBug", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772929446, "uuid": "1e4b5956-1a85-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://prim-sync.vortexis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772929525, "uuid": "4d88d905-1a85-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.86.111.111:45555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772929573, "uuid": "69e85c18-1a85-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.144.158:43028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772929754, "uuid": "d5fc4737-1a85-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.51.95:41801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772929997, "uuid": "66686369-1a86-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.247:49502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772930176, "uuid": "d148fa94-1a86-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.228.109.209:45938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772930236, "uuid": "f5427fab-1a86-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.34.8:49455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772930287, "uuid": "1349b8d8-1a87-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vort-node.vortexis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772930351, "uuid": "39dfcd18-1a87-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.40:33819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772931190, "uuid": "2df21eb3-1a89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://prim-v14.vortexis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772931367, "uuid": "97156c0b-1a89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vort-data.vortexis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772931368, "uuid": "97f66330-1a89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.24.11:36571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772931429, "uuid": "bc72384a-1a89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.34.8:49455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772931616, "uuid": "2b9a898e-1a8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.247:49502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772931736, "uuid": "731b7852-1a8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.71.66:49486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772931788, "uuid": "923fc197-1a8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-base.nimbura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772932147, "uuid": "6838a548-1a8b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nimb-v02.nimbura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772932216, "uuid": "91323687-1a8b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.93.65:48715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772932687, "uuid": "aa3109ed-1a8c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-logic.nimbura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772933231, "uuid": "ee6abe68-1a8d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.0.226:37277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772933355, "uuid": "385adf6f-1a8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.71.66:49486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772933468, "uuid": "7b918f51-1a8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nimb-net.nimbura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772933707, "uuid": "0a060e63-1a8f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gen-unit.quantoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772933713, "uuid": "0d6a9683-1a8f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.93.65:48715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772933887, "uuid": "753c75c1-1a8f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://quan-v5.quantoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772933947, "uuid": "992ff21e-1a8f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.1.39:55330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772934376, "uuid": "98d92145-1a90-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.0.226:37277/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772934607, "uuid": "226f33fd-1a91-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gen-flow.quantoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772934846, "uuid": "b112d2c6-1a91-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://quan-sys.quantoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772934854, "uuid": "b560645a-1a91-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.86.111.111:45555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772935387, "uuid": "f37a0e2e-1a92-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8437455245/ByDG8Kl.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936412, "uuid": "5659b58c-1a95-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.54.35:46714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936540, "uuid": "a2ab4376-1a95-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.32.84.103:49219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936540, "uuid": "a2c190cc-1a95-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.182:57821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936647, "uuid": "e26bd2b8-1a95-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stab-v33.stabulis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936894, "uuid": "75994cae-1a96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.175:54723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936895, "uuid": "75df96fc-1a96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.32.84.103:49219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936945, "uuid": "94248722-1a96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/2", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772936949, "uuid": "9621247d-1a96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.175:45825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772937321, "uuid": "73c87ffd-1a97-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.187.176:36079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772937377, "uuid": "95a26800-1a97-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:42694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772937432, "uuid": "b665db84-1a97-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:45094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772937558, "uuid": "010dd9ba-1a98-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.182:57821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772937558, "uuid": "01102a06-1a98-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.162.44:39960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772938034, "uuid": "1d4c00c9-1a99-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.241.136.21:38439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772938209, "uuid": "8545ccd5-1a99-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fix-point.stabulis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772938396, "uuid": "f4a3f94d-1a99-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:45094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772938396, "uuid": "f4a83c19-1a99-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.175:54723/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772938697, "uuid": "a814f712-1a9a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.179.232.206:46176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772938869, "uuid": "0efe54a0-1a9b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.187.176:36079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772938927, "uuid": "312b384e-1a9b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stab-core.stabulis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772938931, "uuid": "33ef4fe0-1a9b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:42694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939048, "uuid": "797f0ea7-1a9b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dist-core.fractalis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939167, "uuid": "c09dbe2b-1a9b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/selwanhasnaoui-max/Valorant-Plus-Cheat/refs/heads/main/Valorant%20Plus/drectx/Valorant-Cheat-Plus-2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939168, "uuid": "c0c9395f-1a9b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/selwanhasnaoui-max/Valorant-Plus-Cheat/raw/refs/heads/main/Valorant%20Plus/drectx/Valorant-Cheat-Plus-2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939316, "uuid": "1964ff2a-1a9c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.68.41.160:50106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939467, "uuid": "7306db8a-1a9c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/gokulakrishnan611/docker-cheatsheet/refs/heads/main/undercrest/cheatsheet-docker-1.4-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939467, "uuid": "732aa45b-1a9c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/gokulakrishnan611/docker-cheatsheet/raw/refs/heads/main/undercrest/cheatsheet-docker-1.4-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939468, "uuid": "7396e42c-1a9c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.57.156:39750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939646, "uuid": "ddc46ab7-1a9c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/iYagamiGTPS4/nginx-cheatsheet/main/Advanced/cheatsheet-nginx-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939647, "uuid": "de789b0a-1a9c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/iYagamiGTPS4/nginx-cheatsheet/raw/refs/heads/main/Advanced/cheatsheet-nginx-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939836, "uuid": "4eda7b39-1a9d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.193.53:39795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772939890, "uuid": "6f82beb6-1a9d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.179.232.206:46176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940067, "uuid": "d91c49b1-1a9d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://frac-v08.fractalis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940068, "uuid": "d96fdeec-1a9d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/albeiroval/Wild-Forest-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/raw/refs/heads/main/sideboard/Bot-Crypto-Farm-Auto-Clicker-Game-Api-Token-Wild-Forest-Hack-Cheat-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940068, "uuid": "d9a402a1-1a9d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/albeiroval/Wild-Forest-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/refs/heads/main/sideboard/Bot-Crypto-Farm-Auto-Clicker-Game-Api-Token-Wild-Forest-Hack-Cheat-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940131, "uuid": "feac31bd-1a9d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.90.148:48234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940250, "uuid": "462b4ff8-1a9e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.140.18.85:34491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940668, "uuid": "3ef1dcee-1a9f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dist-hub.fractalis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940911, "uuid": "cfc6df70-1a9f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Toroto753/Turan-Gambling-Script-Hack-Cheat-Predictor-Strategies-Keydrop-Skinbaron-hellcase/refs/heads/main/LeapAI.Net/obj/hellcase_Script_Hack_Skinbaron_Gambling_Cheat_Keydrop_Predictor_Turan_Strategies_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940911, "uuid": "cfdf25ed-1a9f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Toroto753/Turan-Gambling-Script-Hack-Cheat-Predictor-Strategies-Keydrop-Skinbaron-hellcase/raw/refs/heads/main/LeapAI.Net/obj/hellcase_Script_Hack_Skinbaron_Gambling_Cheat_Keydrop_Predictor_Turan_Strategies_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772940984, "uuid": "fba06e7f-1a9f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.128.33:53561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941006, "uuid": "08ac6a2f-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.68.41.160:50106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941036, "uuid": "1a2b70cb-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.140.18.85:34491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941088, "uuid": "39a6e52b-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/elroxu/Qorpo-World-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/main/.vs/Qorpo.World-Robot/Game-Cheat-Token-World-Crypto-Bot-Auto-Clicker-Qorpo-Hack-Farm-Api-v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941089, "uuid": "39d1f3c1-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/elroxu/Qorpo-World-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/raw/refs/heads/main/.vs/Qorpo.World-Robot/Game-Cheat-Token-World-Crypto-Bot-Auto-Clicker-Qorpo-Hack-Farm-Api-v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941148, "uuid": "5cf9bc2a-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.115.171:35910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941266, "uuid": "a3c18615-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Coker10/Apeiron-Nft-Bot-Crypto-Cheat-Auto-Farm-Clicker-Game-Api-Hack/raw/refs/heads/main/.vs/Apeiron-Nft-Bot/FileContentIndex/Farm-Bot-Clicker-Crypto-Cheat-Nft-Apeiron-Auto-Game-Api-Hack-v2.1-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941270, "uuid": "a5b50b15-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Coker10/Apeiron-Nft-Bot-Crypto-Cheat-Auto-Farm-Clicker-Game-Api-Hack/refs/heads/main/.vs/Apeiron-Nft-Bot/FileContentIndex/Farm-Bot-Clicker-Crypto-Cheat-Nft-Apeiron-Auto-Game-Api-Hack-v2.1-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941336, "uuid": "cd4177af-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:59231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941387, "uuid": "eb65f259-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/moelekkkk/Pandas_Notes/main/mainlander/Pandas-Notes-v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941387, "uuid": "ebd87ca3-1aa0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/moelekkkk/Pandas_Notes/raw/refs/heads/main/mainlander/Pandas-Notes-v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941515, "uuid": "37ea946b-1aa1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.118.136:45368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941572, "uuid": "5a02b143-1aa1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kripansh2006/WaryasSWHE/raw/refs/heads/main/variant/Waryas-SWHE-v2.0-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941572, "uuid": "5a07d4a6-1aa1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kripansh2006/WaryasSWHE/refs/heads/main/variant/Waryas-SWHE-v2.0-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941687, "uuid": "9e4cbec8-1aa1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ryanpheonix09/Cosmo-Legacy/refs/heads/main/Arctostaphylos/Cosmo-Legacy-2.0-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941689, "uuid": "9fab845f-1aa1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ryanpheonix09/Cosmo-Legacy/raw/refs/heads/main/Arctostaphylos/Cosmo-Legacy-2.0-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941807, "uuid": "e626b0a5-1aa1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/I-Krushna/typingmonkey/refs/heads/main/assets/Software-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941808, "uuid": "e654f6d9-1aa1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/I-Krushna/typingmonkey/raw/refs/heads/main/assets/Software-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941927, "uuid": "2d6a0b19-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/yenohjio/teach-JavaScript/refs/heads/main/tanistry/Java-Script-teach-v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941927, "uuid": "2d76563b-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/yenohjio/teach-JavaScript/raw/refs/heads/main/tanistry/Java-Script-teach-v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941928, "uuid": "2e158a8f-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.90.148:48234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941986, "uuid": "50dce53a-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/AkashAdhikari01/StomCheat/refs/heads/main/stomcheat/src/main/java/me/athulsib/stomcheat/extension/Cheat-Stom-v1.5-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772941987, "uuid": "5109468c-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AkashAdhikari01/StomCheat/raw/refs/heads/main/stomcheat/src/main/java/me/athulsib/stomcheat/extension/Cheat-Stom-v1.5-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942048, "uuid": "756d3de8-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jesusmiguelito/DungeonRampageCheat/refs/heads/master/screenshots/Dungeon_Rampage_Cheat_1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942050, "uuid": "76852d5d-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jesusmiguelito/DungeonRampageCheat/raw/refs/heads/master/screenshots/Dungeon_Rampage_Cheat_1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942108, "uuid": "991a1b64-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/m25s5/Chibi-Clash-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/refs/heads/main/Chibi-Clash-Exp/ChibiApp/Hack_Auto_Clicker_Chibi_Crypto_Cheat_Clash_Token_Game_Bot_Farm_Api_v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942109, "uuid": "99dcb0a5-1aa2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/m25s5/Chibi-Clash-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/raw/refs/heads/main/Chibi-Clash-Exp/ChibiApp/Hack_Auto_Clicker_Chibi_Crypto_Cheat_Clash_Token_Game_Bot_Farm_Api_v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942346, "uuid": "275094f1-1aa3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Abbashussain5/Hacking-Cheatsheets/refs/heads/main/Responder/Cheatsheets_Hacking_3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942346, "uuid": "2769c3ae-1aa3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Abbashussain5/Hacking-Cheatsheets/raw/refs/heads/main/Responder/Cheatsheets_Hacking_3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942587, "uuid": "b6f02cbc-1aa3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.128.33:53561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942647, "uuid": "daae5e32-1aa3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.118.136:45368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942767, "uuid": "21ed3c78-1aa4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sartakayy/cardian/refs/heads/main/docs/Software-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942767, "uuid": "220457c3-1aa4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sartakayy/cardian/raw/refs/heads/main/docs/Software-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942767, "uuid": "2211efc8-1aa4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MasSareh/PokePath-Cheat/raw/refs/heads/MasSareh/unhazarding/Cheat-Path-Poke-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942768, "uuid": "22baeb48-1aa4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MasSareh/PokePath-Cheat/refs/heads/MasSareh/unhazarding/Cheat-Path-Poke-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942774, "uuid": "2690fb5f-1aa4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.130.177:41066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772942776, "uuid": "275c6b6d-1aa4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:59231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772943013, "uuid": "b48454bb-1aa4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.223.5:42295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772943425, "uuid": "aa63d876-1aa5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://frac-run.fractalis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772943673, "uuid": "3e75becd-1aa6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:44613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772943736, "uuid": "63b91f0b-1aa6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.30.151:50438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772943795, "uuid": "87213d41-1aa6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.160.130.104:33201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772943797, "uuid": "88498a58-1aa6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.185.44:46347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772943909, "uuid": "cae399c2-1aa6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext-vault.tensora.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772944334, "uuid": "c7df148c-1aa7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.58.39.250:40359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772944335, "uuid": "c8e1c23f-1aa7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.188.121:46459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772944568, "uuid": "5362c13d-1aa8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tens-v11.tensora.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772944817, "uuid": "e7be01cb-1aa8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:44613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772944987, "uuid": "4d4bd94c-1aa9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.233:38485/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772945110, "uuid": "969439e0-1aa9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext-sync.tensora.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772945297, "uuid": "065f2011-1aaa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.160.130.104:33201/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772945416, "uuid": "4d338df0-1aaa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.30.151:50438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772945476, "uuid": "70d8dd3a-1aaa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.226.13:44961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772945491, "uuid": "7a09bffe-1aaa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.135.226:55320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772945528, "uuid": "8f8d3595-1aaa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tens-base.tensora.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946127, "uuid": "f519c07e-1aab-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-node.kinetica.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946247, "uuid": "3c95aa98-1aac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/YelitzaMarcano79/DOOMQL/main/data/Software_3.8-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946248, "uuid": "3cb2c608-1aac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/YelitzaMarcano79/DOOMQL/raw/refs/heads/main/data/Software_3.8-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946367, "uuid": "83d6680e-1aac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/UMARi4u2get-cmd/encoder/raw/refs/heads/main/include/encoder1.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946367, "uuid": "83dac074-1aac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/UMARi4u2get-cmd/encoder/refs/heads/main/include/encoder1.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946432, "uuid": "aac91297-1aac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.133.100.187:40255/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946487, "uuid": "cb52e0e0-1aac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lezer10/cheatcode/refs/heads/main/frontend/src/hooks/react-query/threads/Software_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946489, "uuid": "ccd16bc3-1aac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lezer10/cheatcode/raw/refs/heads/main/frontend/src/hooks/react-query/threads/Software_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946796, "uuid": "835877e3-1aad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.11.173:52798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946908, "uuid": "c63b27b0-1aad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Bond004/Mutah-Gambling-Script-Hack-Cheat-Predictor-Strategies-Keydrop-csmoney-csgoskins/refs/heads/main/biceps/Hack_Predictor_Script_Keydrop_csmoney_csgoskins_Gambling_Strategies_Mutah_Cheat_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946908, "uuid": "c63da4d8-1aad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Bond004/Mutah-Gambling-Script-Hack-Cheat-Predictor-Strategies-Keydrop-csmoney-csgoskins/raw/refs/heads/main/biceps/Hack_Predictor_Script_Keydrop_csmoney_csgoskins_Gambling_Strategies_Mutah_Cheat_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946909, "uuid": "c6c5b356-1aad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.105.143:39162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946966, "uuid": "e8e8ba8d-1aad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://kine-v07.kinetica.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772946975, "uuid": "ee1f844d-1aad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.135.226:55320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772947152, "uuid": "58170b2c-1aae-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.37.181:49056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772947217, "uuid": "7ec74a29-1aae-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.105.143:39162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772947447, "uuid": "07d74671-1aaf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-net.kinetica.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772947459, "uuid": "0ee92ae5-1aaf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.19.21:49203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772947459, "uuid": "0ef18f76-1aaf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FiberWeaverAssess/CS2-Cheat-2026-External/releases/download/new/External-2.5.1-win64.rar", "Tag": [ { "name": "pw-cs2026", "colour": "#435dcc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772947875, "uuid": "06d8271d-1ab0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.245.242:42714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948115, "uuid": "95bd99a3-1ab0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.37.181:49056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948244, "uuid": "e29289f1-1ab0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.248.130.71:47368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948355, "uuid": "251e887c-1ab1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:41094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948411, "uuid": "463ac23b-1ab1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Tien18020/fullyexternal-cs2/raw/refs/heads/main/questorial/cs_fullyexternal_2.9-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948412, "uuid": "46be7676-1ab1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Tien18020/fullyexternal-cs2/main/questorial/cs_fullyexternal_2.9-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948532, "uuid": "8e83de1f-1ab1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.11.173:52798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948646, "uuid": "d282bce5-1ab1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ziznem3269/NullHooks/refs/heads/main/src/dependencies/utilities/console/Null_Hooks_1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948649, "uuid": "d3d92758-1ab1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ziznem3269/NullHooks/raw/refs/heads/main/src/dependencies/utilities/console/Null_Hooks_1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772948828, "uuid": "3ed927ad-1ab2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.96:56212/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772949256, "uuid": "3dfc4d2f-1ab3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.45.116:52268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772949308, "uuid": "5cd58373-1ab3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://kine-flow.kinetica.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772949548, "uuid": "ebd302c6-1ab3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.64.60:51110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772949617, "uuid": "1506a23d-1ab4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.80:60069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772949668, "uuid": "33553080-1ab4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.80:60069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772949749, "uuid": "63f9a566-1ab4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.57.144:54355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772949851, "uuid": "a04f64f1-1ab4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:41094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772949917, "uuid": "c7ff31ba-1ab4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.248.130.71:47368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772950273, "uuid": "9c46efd4-1ab5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.96:56212/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772950388, "uuid": "e0d9a642-1ab5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-way.axonia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772950453, "uuid": "078cd3b2-1ab6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.57.144:54355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772950820, "uuid": "e1e6be7f-1ab6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.45.116:52268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772951292, "uuid": "fb39e32f-1ab7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://axon-v2.axonia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772951551, "uuid": "95a3136e-1ab8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.253.99.65:50085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772951561, "uuid": "9b867ed0-1ab8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.253.99.65:50085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772951836, "uuid": "3ffbd2a7-1ab9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.163:52328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772952380, "uuid": "84284715-1aba-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.185.73:48461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772952436, "uuid": "a580e9c5-1aba-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.109.91:37948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772952610, "uuid": "0ccfb92c-1abb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-sync.axonia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772952685, "uuid": "39a5a2c5-1abb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.185.73:48461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772952728, "uuid": "538e45a2-1abb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://download-version.1-45-1.com/claude", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772952738, "uuid": "590c18bc-1abb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.219.237.111:3000/files/bin", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772952787, "uuid": "7698d50c-1abb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.121.164:49116/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772952849, "uuid": "9b75b5ae-1abb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://axon-ref.axonia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772953098, "uuid": "2fd00b0f-1abc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.241:34439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772953099, "uuid": "304000fe-1abc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.239.100:60749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772953209, "uuid": "720d36f2-1abc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-unit.volumex.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772953570, "uuid": "48f96f96-1abd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.163:52328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772953629, "uuid": "6c3dc6da-1abd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol-v19.volumex.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772953758, "uuid": "b9425ad5-1abd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.38.215:51474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772953897, "uuid": "0c25aa2f-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.160.103:43462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772953990, "uuid": "43bd2eb4-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.73.110:44759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954236, "uuid": "d5f6fe75-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.46.33.16/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954236, "uuid": "d5f9d70b-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.46.33.16/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954236, "uuid": "d5f9d80b-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.46.33.16/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954236, "uuid": "d5fdd159-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.46.33.16/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954236, "uuid": "d60ef87c-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.46.33.16/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954236, "uuid": "d61601d9-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.46.33.16/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954301, "uuid": "fcd8fbf6-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.46.33.16/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954301, "uuid": "fcdba85d-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.46.33.16/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954411, "uuid": "3e9a412b-1abf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-net.volumex.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954530, "uuid": "85645f4e-1abf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.241:34439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954588, "uuid": "a7e55448-1abf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol-base.volumex.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954598, "uuid": "ae2e19b9-1abf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.106.241.72:54655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954832, "uuid": "39b8b908-1ac0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.164.210:49733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772954956, "uuid": "83726547-1ac0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.38.215:51474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955017, "uuid": "a799348f-1ac0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.160.103:43462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955137, "uuid": "ef3445c4-1ac0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.164.210:49733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955189, "uuid": "0e274aa9-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://fil.ydns.eu/somgftred/jigcAIp.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955193, "uuid": "10c501b0-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/x97ra6bino9olbolx8ha8/optimized_MSI.png?rlkey=ek4gmta3ih6tg3kq3m9su1zsr&st=ao90xecu&dl=0?id=661120a4-f576-4e8f-bc6a-7b48650ac68c", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955311, "uuid": "56e7dc95-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/la3.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955314, "uuid": "5895b434-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ia601409.us.archive.org/19/items/optimized_msi_20260303_1054/optimized_MSI.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955314, "uuid": "58b622b4-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://openlineseguros.com.br/onedrives/img_235532.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955323, "uuid": "5e532210-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://openlineseguros.com.br/onedrives/optimized_MSI.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955367, "uuid": "7838d863-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://shariels.42web.io/img_210019.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955371, "uuid": "7acb3108-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://openlineseguros.com.br/onedrives/img_131302.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955487, "uuid": "bfd7eb37-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-4c182737706e41d29aee6cc5517f834d.r2.dev/img_163200.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955488, "uuid": "c02745fe-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://fil.ydns.eu/eurouhyt/dgkirar.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955488, "uuid": "c0a2e4bd-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-gate.modula.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955493, "uuid": "c39a61c9-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://openlineseguros.com.br/onedrives/img_233123.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955551, "uuid": "e6440e12-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/ha3.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955669, "uuid": "2c16eb6e-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://crypterrrrr.42web.io/img_055742.png", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955674, "uuid": "2f3406e9-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://winston.rf.gd/img_141003.png", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955676, "uuid": "3056fd17-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cocinanikkei.com.pe/img_085256.png", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955681, "uuid": "336b5fa8-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://archive.org/download/2ndrumpp/2ndrumpp.png", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955727, "uuid": "4ece4ffa-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-4c182737706e41d29aee6cc5517f834d.r2.dev/cNTnCsbnyeFt134.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955727, "uuid": "4ef10d49-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-4c182737706e41d29aee6cc5517f834d.r2.dev/Commercialized.hhk", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955729, "uuid": "503c616b-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-4c182737706e41d29aee6cc5517f834d.r2.dev/Predy.snp", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955731, "uuid": "51508262-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-4c182737706e41d29aee6cc5517f834d.r2.dev/qZtvyHlFRTQ244.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772955971, "uuid": "e0558ef6-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeibqcivjhwg2msil5g62did64uhtptlf7epidbrat4gexerzfv5mmq.ipfs.dweb.link/?filename=optimized_MSI.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956099, "uuid": "2ce800f3-1ac3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.112.254:56563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956511, "uuid": "2258fd77-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://casadoserralheirosaocarlos.com.br/ENCRYPTS.Ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956511, "uuid": "22607dad-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://fil.ydns.eu/jhuytr/FSAmegn.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956514, "uuid": "24175317-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.118/nderu.png", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956569, "uuid": "44a25e55-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.118/actiok.png", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956569, "uuid": "44bff44e-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.118/mynnepeng.png", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956569, "uuid": "44f0841d-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.118/saxch.png", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956572, "uuid": "4692ce8b-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://casadoserralheirosaocarlos.com.br/ENCRYPTZ.Ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956573, "uuid": "46ee8e54-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.118/bgdol.png", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956574, "uuid": "47991996-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ameyiando.com/main/ENCRYPT.Ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956582, "uuid": "4cbfe9a4-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.109.91:37948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956587, "uuid": "4f883f0f-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.239.100:60749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956812, "uuid": "d57add0b-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.136.4.176:50423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956814, "uuid": "d70978cb-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://repaicloud.navignord.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956878, "uuid": "fcf756bc-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.229:55422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956932, "uuid": "1d023d7e-1ac5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.126.177:35214/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772956992, "uuid": "411b47a6-1ac5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.121.164:49116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772957361, "uuid": "1d0bdf6c-1ac6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.196.233:60370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772957482, "uuid": "6541df9b-1ac6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.196.233:60370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772957781, "uuid": "170186e6-1ac7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.232.143.133:45022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772957827, "uuid": "32d633c9-1ac7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://zx8895.navignord.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772957971, "uuid": "8854d3c4-1ac7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.144.42:37535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772958081, "uuid": "c9da75d6-1ac7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.232.143.133:45022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772958617, "uuid": "09847cf3-1ac9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.244.36.34:54432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772958862, "uuid": "9bb3646c-1ac9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.73.110:44759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772959039, "uuid": "04fbc338-1aca-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.74.16:33094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772959099, "uuid": "28f0d658-1aca-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.161:49884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772959158, "uuid": "4c181633-1aca-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.44:34207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772959210, "uuid": "6ae41d4a-1aca-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcoreet3.excitfollower.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772959645, "uuid": "6df65221-1acb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.173.217:47812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772959760, "uuid": "b2d67492-1acb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.196.17:57865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772959765, "uuid": "b58db30c-1acb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.71.226:43327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772959822, "uuid": "d7b618b5-1acb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.36:40954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772959823, "uuid": "d84b3e56-1acb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.36.23:53022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772959881, "uuid": "facd680f-1acb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.195.156:52993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772960061, "uuid": "662a4bcf-1acc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.74.16:33094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772960182, "uuid": "ae291a7d-1acc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.70.80:41984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772960186, "uuid": "b0bcd949-1acc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.196.17:57865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772960528, "uuid": "7c88ca29-1acd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://1pqv53qc.dumbbellshower.digital/?=check&&actmn=fqKKoXttkOgYYrsq", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772960587, "uuid": "9f9aeea6-1acd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunarslo.oakumsenile.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772961187, "uuid": "056f238c-1acf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://terminal-mark.oakumsenile.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772961269, "uuid": "367c1167-1acf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.16:60003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772961373, "uuid": "740d3c59-1acf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelfluxor.oakumsenile.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772961464, "uuid": "aa239e9e-1acf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.36:40954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772961548, "uuid": "dc6e7405-1acf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-s4mp.limbsingle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772961624, "uuid": "09afe3ed-1ad0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.36.23:53022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772961852, "uuid": "91e395eb-1ad0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://7axh.limbsingle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772961866, "uuid": "99d2d3d2-1ad0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.70.80:41984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772962168, "uuid": "4dcd6137-1ad1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bandwidt-mesh.limbsingle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772962520, "uuid": "1fd2e6d4-1ad2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.16:60003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772962570, "uuid": "3de4ccd9-1ad2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://xvneiys.limbsingle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772962699, "uuid": "8a87fae6-1ad2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.176.145:41385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772962761, "uuid": "af3ecb3f-1ad2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.84.146:56285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772962818, "uuid": "d1669dcf-1ad2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.173.217:47812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963053, "uuid": "5d57bb86-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.19/test_exe/sv_chost.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963055, "uuid": "5f00d26d-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.239.100/bt/svchost.exe", "Tag": [ { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963066, "uuid": "654255ff-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.86.89.251/access/Remote%20Access-windows64-offline.exe?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963072, "uuid": "689ce509-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.19/test_exe/new.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963086, "uuid": "70fab7e3-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.241/notafiscal132421323344432026.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963086, "uuid": "716531bd-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bulledesophros.top/access/Remote%20Access-windows32-offline.exe?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963087, "uuid": "71e5667e-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.86.89.251/access/Remote%20Access-windows32-offline.exe?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963087, "uuid": "71e882f2-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bulledesophros.top/access/Remote%20Access-windows64-offline.exe?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963088, "uuid": "722bfb9c-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.61.151.206/access/Remote%20Access-windows64-offline.exe?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963088, "uuid": "723a4dff-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.61.151.206/access/Remote%20Access-windows32-offline.exe?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963126, "uuid": "88cf6c01-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.236.17/Ezo0HJkTPWyaIZsj86znTAzDNBQB3JFjrh2qin0yZKkczcchQlrXoftNLL8Sw64H_NJ8Kmljo7qZ5PpDzK-QGxm4L7zmhr1DsEdR", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963170, "uuid": "a383ce51-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://roy46-cast.amperesilence.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963286, "uuid": "e87c22da-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.19/test_exe_!/config.b64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963286, "uuid": "e881f7fd-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.19/test_exe/config.b64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963286, "uuid": "e894f644-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.19/test_exe_1/config.b64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963292, "uuid": "ebd9a850-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.61.149.19/test_exe/sv_chost.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963405, "uuid": "2f980d1b-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87UOzwVE3wvHPKN9X9ojr5dtNpWYrk1sBSK_BezQik_BGpbF06nJgoTxHoDD0ZXerxMKKZgmFjhD6bCpDxbk9TP7jnX2zqZ", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963405, "uuid": "2fa1d78b-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.236.17/Ezo0HJkTPWyaIZsj86znTAzDNBQB3JFjrh2qin0yZKkczcchQlrXoftNLL8Sw64H_NJ8Kmljo7qZ5PpDzK-QGxm4L7zmhr1DsEdR", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963405, "uuid": "2fa216d5-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.236.17/Ezo0HJkTPWyaIZsj87UO5QRjSgA9ZYu2mMr4qAYHXp0xa9MDpW78CPq3ZZI0foJZRhOe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963406, "uuid": "2fb36d04-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87Rd9wA8HcCowvpp0JDNhzRcNjRgrtJ80eCRVI0vHbhu2pRjhAAgKrOGFdQd1eNKdPmTkMlwd3WSR2PYy1mWTzx6B-a/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963406, "uuid": "2fd3a092-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87Rd9wA8HcCowvpp0JDNhzRcNjRgrtJ80eCRVI0vHbhu2pRjhAAgKrOGF", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963406, "uuid": "2fea1db7-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87UO5QRjSgA9ZYu2mMr4qAYHXp0xa9MDpW78CPq3ZZI0foJZRhOe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963406, "uuid": "3005a514-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87RenASrl5gEf79sX86-yFR34h14nRacuUQrHpRvBPAuSypQ77Y9vaq9x3SHb6yBq882-MoJrCXSF2544huQRqZ-8_", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963406, "uuid": "301df293-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://cloudaxis.cc/gsmft/yueu/fkvqld/tvqqwh/ushu/22.exe/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963406, "uuid": "302c1d7f-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://cloudaxis.cc/gsmft/yueu/fkvqld/tvqqwh/ushu/22.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963407, "uuid": "30b5ab26-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudaxis.cc/gsmft/yueu/fkvqld/tvqqwh/ushu/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963408, "uuid": "3117c00a-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudaxis.cc/gsmft/yueu/fkvqld/tvqqwh/ushu/update.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963410, "uuid": "324fbc8b-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudaxis.cc/gsmft/yueu/fkvqld/tvqqwh/ushu/22.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963647, "uuid": "bfc74e16-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudaxis.cc/Ezo0HJkTPWyaIZsj86znTAzDNBQB3JFjrh2qin0yZKkczcchQlrXoftNLL8Sw64H_NJ8Kmljo7qZ5PpDzK-QGxm4L7zmhr1DsEdR", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963655, "uuid": "c491d775-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/XHyS/t8yNH/PsGFxXS", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963657, "uuid": "c5933e24-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/SIOPtlRj/1PrLwsPKJ/hcGgZDkMB", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963658, "uuid": "c5ef8312-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://zoom.us05-web.us/ft?topic=s>=209", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963668, "uuid": "cc1f7c15-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.237.216/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963707, "uuid": "e388dac7-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.239.100/Documentos/NotaFiscal-Fev2026-NF38291.pdf.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963825, "uuid": "29f98ac9-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/3IwuRD5x/KRtN9f/a3OEdUSzKCM", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963825, "uuid": "29fcc55d-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/z8rbpP/VC2TqCt/0tEF3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963826, "uuid": "2a02ba64-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/OMxc/u2OMdbZvf/nkbLcVb7u5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963826, "uuid": "2a13f24e-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/lpIHU/oKoxUE/Z2TAg9T", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963826, "uuid": "2a1416f2-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/FeBo/I4tc/ATre4ao", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963826, "uuid": "2a1c1f60-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/YesRgs/8pm4a/YzXdwgzAuo", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963826, "uuid": "2a57b9be-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/0Z4DkMnG/YiSRPO4/7VjM3PszY", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963827, "uuid": "2b19e284-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/sQPb4/YLN44WOzl/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963827, "uuid": "2b222a10-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/398IiY/PVsGB9lN/VjxNIcrN", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963827, "uuid": "2b297349-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/PapaPepeV1.4.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963827, "uuid": "2b297fa7-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/KhDx6D/dM7z7/FT0jxB", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b31eca9-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/nBqFVpkaus8/yi7RwlZ/qxsA1OP", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b320c12-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/P4251j/8IYMHuLRd/3D5Aw3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b37849a-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/FZxHXuqIv/lNggqi/hvzk5Yx", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b37c1a8-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/JH26V/WZa7QYS/yMy4WBYwz8R", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b37f843-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/pT3uhvD/kt9T6/lXs78", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b3c216a-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/tzODbjbiRwT/JPe2/6Vd4T6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b3c5ada-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/kaEt5LKvZ/GcOj/HtItwTkb0", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b3c5c75-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/EmgX1d/o4nx5/Mqmg2XB", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b3c5fbf-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/WPdWYL/KYeSdaN/iVtZm5K", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b3c7402-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/CjZkAPj/rvvCs1t/fnM8vLqg1E", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b45d419-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/pxMWrr/2GVnGWo9I/dnTMaWdh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b45d4ea-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/2glFK/Nx4udA3T/s7r9", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b4c846d-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/YjCBqRHg/LeU4rzOan/4joAC", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b4d04bb-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nelavohomet.com/PapaPepeV1.4.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b56f4f0-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/OzXb5y4KH/pyqyD/yH8U", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b66e75d-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/zhS2yS/f4Xjyp/bf0cNvht", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b6a2ad8-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/3m8D2l/lKQvsy/1f4MlBphL", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b6ac50d-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/ZiNjvYB3/VgD5o/x1NATLCW2uj", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b7090b8-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nelavohomet.com/yLfOQasO/r5VOEfrp/zhTWFgAGsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b726b57-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/lCbkW9d7/0BVA4/gylQzHWAQr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b7d92cd-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/YTO3grVoir/iwBvW/8KfZWkT", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b8187cb-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.86.68.175/PapaPepeV1.6.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2b99e7b9-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/Q7Fz0uUZ/0x7Y4/GcFeu5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2ba1516e-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.nelavohomet.com/PapaPepeV1.4.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2ba49804-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/widES7/ntjVoCi46/dsVc2fO", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2ba4dbac-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/T7vdNebIbOD/1x6FBRO6/ELBhS", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2ba51be4-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/SZRuIhJ8dd/slS6/GBaY30Zjkf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2badbd40-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/UevZCkQcgw2/2GBmwCao/hNlB8", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2badc069-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/tz6K58/ILsA7cw/mMLCQC6iaO", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2bb88655-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/index.html.want_to_cry", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2bb88d09-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/dwo428Tf/mkUan/frTb", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2bb8a1b0-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/UyG2MULfK/CVQfMbw/S1KEt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963828, "uuid": "2bbcb58a-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/nERr/o2IOTis91/buMCUWWmJSG", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963829, "uuid": "2bd15894-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.nelavohomet.com/MyWallet.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963829, "uuid": "2bd4b7b9-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/mnEQ/PIoMQh/Vx0KJ", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963829, "uuid": "2bda3e21-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/d7X9VHk/Lulf/pIfKNvq", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963829, "uuid": "2bf05f7d-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/j7se1/lgcd/os6wxd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963829, "uuid": "2bf067c8-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/0FQum2BFeA/qGNNxl4/6mzmPwGPQWF", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963829, "uuid": "2c02307a-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nelavohomet.com/MyWallet.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963829, "uuid": "2c0c423c-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/GzmIzH7CVN/xThu/kNG79Sfy", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963829, "uuid": "2c499c40-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/zkEBiwNbs/ImfR/PaO8nH", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963829, "uuid": "2c586bcb-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/tqBDdhIxETF/elGarP/27Oo", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963830, "uuid": "2c624e59-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/aki8Wu/T8Hzbk7Z/ePuOKZ7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963830, "uuid": "2c80f06d-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/JHzgh/5f3t/8SCqrxAX", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963830, "uuid": "2c91d602-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/ngAO13/aJ3IWhQK6/oRlkx", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963830, "uuid": "2c9bba19-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/G2EqAodPCN7/cefMgc5/rWdJPxuSklI", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963830, "uuid": "2cac6c6a-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/acqo93z1i/lptwvcj/ncrzj", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963830, "uuid": "2cb26aa3-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/gCLW8P0xBN/9y7ZsloP5/s2gv3vxwC", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963830, "uuid": "2cc38e2c-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/ooq4yz1sw1u/bwrd/GbPz3WUNp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963830, "uuid": "2cd4587b-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/v8dPWoBGj/UWwSqKFf/0qXUGTJEob", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963830, "uuid": "2cd9357a-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/MtJm9YVObG/7hv8LiOyl/CgZ8p8DbJ5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963830, "uuid": "2ce38e3e-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/VSAXpRHOR/MIuHzbJ/9OFIv", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963830, "uuid": "2ce3a03a-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/O7VTCDQ/ipiX/dh8FXO", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963831, "uuid": "2cfce3a0-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/eEFNP/JmrJPVjW/pFNouz71i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963831, "uuid": "2d03b984-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/NlFVdzHj88/NdqVhMoh2/BlRP", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963831, "uuid": "2d03dce8-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/p9U5/jXyyJGi/wZ1NM68U", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963831, "uuid": "2d0f197f-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/D3rhTuf/ybazus/GuievxNlz", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963831, "uuid": "2d13bf11-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/yLfOQasO/r5VOEfrp/zhTWFgAGsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963831, "uuid": "2d13e4dd-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/s3hHk/awaqpy/bdSQsK8zSpI", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963831, "uuid": "2d191c0c-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/LVuL/pfa1SuY7/8iHKTx9B", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963831, "uuid": "2d234f7f-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/ofaf/BXQmxBK/akt1Ft", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963831, "uuid": "2d4d598f-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/eCpCbUF/n0R1c/RLOGdaQAR", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963832, "uuid": "2dbd1070-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/EHWRs/h0KexPII5/HzQHKr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963832, "uuid": "2dfcf1e5-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/I9wj/RPGOgl8/NtTX", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963833, "uuid": "2e455f9e-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/zbXIYiy/dLJH/QrCktLD114", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963833, "uuid": "2e95ed18-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/c34Vd/Zqyvn/test.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963833, "uuid": "2e9b0dd7-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/gCLW8P0xBN.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963833, "uuid": "2ebf94d5-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/y4V7C4zJ/2LmOYj/33YE", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963834, "uuid": "2ee2b45d-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/yxkCrauO2/6t6msK/1dfw7t", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963834, "uuid": "2ef357cc-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/ngzi/orzc9xiz/wtag", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963835, "uuid": "2fa03c18-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://nelavohomet.com/0tIKofR/BbZV8/U23gb6UD9Ca", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "70f06df9-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/d7X9VHk/Lulf/pIfKNvq", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "70f08e26-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/D3rhTuf/ybazus/GuievxNlz", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "70f80882-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/3IwuRD5x/KRtN9f/a3OEdUSzKCM", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "70f902e1-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/YjCBqRHg/LeU4rzOan/4joAC", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "70f9f650-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/0tIKofR/BbZV8/U23gb6UD9Ca", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "70fb495e-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/c34Vd/Zqyvn/test.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "70fb75f8-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/ngzi/orzc9xiz/wtag", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "70fc0b7c-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/FeBo/I4tc/ATre4ao", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "710cb0af-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/zhS2yS/f4Xjyp/bf0cNvht", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "710cbde3-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/0FQum2BFeA/qGNNxl4/6mzmPwGPQWF", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "710d8b3a-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/aki8Wu/T8Hzbk7Z/ePuOKZ7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "710d8ffb-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/zbXIYiy/dLJH/QrCktLD114", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "710d92db-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/s3hHk/awaqpy/bdSQsK8zSpI", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "710da1ed-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/T7vdNebIbOD/1x6FBRO6/ELBhS", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "710db56d-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/eCpCbUF/n0R1c/RLOGdaQAR", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "710ed78a-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/ZiNjvYB3/VgD5o/x1NATLCW2uj", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "710f01aa-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/VSAXpRHOR/MIuHzbJ/9OFIv", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "712fe21c-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/JH26V/WZa7QYS/yMy4WBYwz8R", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "713022af-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/j7se1/lgcd/os6wxd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7131ffc4-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.86.68.175/yLfOQasO/r5VOEfrp/zhTWFgAGsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "71374b9b-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/tzODbjbiRwT/JPe2/6Vd4T6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "71377563-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/UevZCkQcgw2/2GBmwCao/hNlB8", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7139c7b4-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/dwo428Tf/mkUan/frTb", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7148fc68-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/acqo93z1i/lptwvcj/ncrzj", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "714f2db1-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/pxMWrr/2GVnGWo9I/dnTMaWdh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7152be79-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/index.html.want_to_cry", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "715827bc-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/pT3uhvD/kt9T6/lXs78", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "715aa64f-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/p9U5/jXyyJGi/wZ1NM68U", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "715eeabd-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/ofaf/BXQmxBK/akt1Ft", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7163742b-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/tqBDdhIxETF/elGarP/27Oo", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7163a507-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/398IiY/PVsGB9lN/VjxNIcrN", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7163fc96-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/y4V7C4zJ/2LmOYj/33YE", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7164075e-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/G2EqAodPCN7/cefMgc5/rWdJPxuSklI", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "716442fa-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/SIOPtlRj/1PrLwsPKJ/hcGgZDkMB", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7166f08c-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/UyG2MULfK/CVQfMbw/S1KEt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "716aa308-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/sQPb4/YLN44WOzl/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "716beae6-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/widES7/ntjVoCi46/dsVc2fO", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "717cc8d5-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/SZRuIhJ8dd/slS6/GBaY30Zjkf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "717f2dc1-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/WPdWYL/KYeSdaN/iVtZm5K", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "717fbcc6-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/zkEBiwNbs/ImfR/PaO8nH", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7180cee2-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/3m8D2l/lKQvsy/1f4MlBphL", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7180ecb5-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/gCLW8P0xBN/9y7ZsloP5/s2gv3vxwC", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "718141ae-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/yLfOQasO/r5VOEfrp/zhTWFgAGsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "71816649-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/PapaPepeV1.4.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "7181c6f7-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/yxkCrauO2/6t6msK/1dfw7t", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963945, "uuid": "718386f2-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/O7VTCDQ/ipiX/dh8FXO", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "718b74b1-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/ngAO13/aJ3IWhQK6/oRlkx", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71992f0b-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/LVuL/pfa1SuY7/8iHKTx9B", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71994c39-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.172.86.68.175/MyWallet.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "719a0596-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/OzXb5y4KH/pyqyD/yH8U", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "719a95e4-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/mnEQ/PIoMQh/Vx0KJ", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "719adfa9-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/lpIHU/oKoxUE/Z2TAg9T", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "719ae867-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/v8dPWoBGj/UWwSqKFf/0qXUGTJEob", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "719b60c7-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/Q7Fz0uUZ/0x7Y4/GcFeu5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "719d2023-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/CjZkAPj/rvvCs1t/fnM8vLqg1E", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71a81e65-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/nERr/o2IOTis91/buMCUWWmJSG", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71a983ad-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/EHWRs/h0KexPII5/HzQHKr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71ab9916-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/z8rbpP/VC2TqCt/0tEF3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71abc779-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/YesRgs/8pm4a/YzXdwgzAuo", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71ac5196-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/JHzgh/5f3t/8SCqrxAX", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71b4a2dc-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/I9wj/RPGOgl8/NtTX", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71b64792-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/gCLW8P0xBN.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71b9e5ab-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/lCbkW9d7/0BVA4/gylQzHWAQr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71be3a33-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/nBqFVpkaus8/yi7RwlZ/qxsA1OP", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71bf4ae5-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.86.68.175/PapaPepeV1.4.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71c8b86e-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/YTO3grVoir/iwBvW/8KfZWkT", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71c9004e-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/GzmIzH7CVN/xThu/kNG79Sfy", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71cd2f12-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.172.86.68.175/PapaPepeV1.4.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71cd7df5-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/2glFK/Nx4udA3T/s7r9", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71d00b94-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/EmgX1d/o4nx5/Mqmg2XB", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71d00bae-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/KhDx6D/dM7z7/FT0jxB", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71dd1a58-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/OMxc/u2OMdbZvf/nkbLcVb7u5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71df2de4-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/NlFVdzHj88/NdqVhMoh2/BlRP", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71df405d-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.86.68.175/MyWallet.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71df4f15-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/MtJm9YVObG/7hv8LiOyl/CgZ8p8DbJ5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71df5a4a-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/ooq4yz1sw1u/bwrd/GbPz3WUNp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "71e40891-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/P4251j/8IYMHuLRd/3D5Aw3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "720d41f1-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/tz6K58/ILsA7cw/mMLCQC6iaO", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "72124882-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/eEFNP/JmrJPVjW/pFNouz71i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "72124c37-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/FZxHXuqIv/lNggqi/hvzk5Yx", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "72126024-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/0Z4DkMnG/YiSRPO4/7VjM3PszY", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772963946, "uuid": "7215deb7-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/kaEt5LKvZ/GcOj/HtItwTkb0", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772964008, "uuid": "967f454e-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mvxc.amperesilence.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772964139, "uuid": "e4ddeb2c-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.29.117:46212/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772964188, "uuid": "01c8ab2b-1ad6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://1n5igh6-lab.bobikcleavage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772964198, "uuid": "07cc5e4d-1ad6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.28.168:55385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772964372, "uuid": "7000a6d2-1ad6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cr3s9-mesh.bobikcleavage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772964382, "uuid": "75937afd-1ad6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.176.145:41385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772964668, "uuid": "206b4625-1ad7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://qhye.bobikcleavage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772964862, "uuid": "93fd043f-1ad7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.21:55914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772965214, "uuid": "65981d36-1ad8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.170:49568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772965267, "uuid": "84e7bc8e-1ad8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sp115-index.bobikcleavage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772965513, "uuid": "179b7fc8-1ad9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.99.14:53549/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966058, "uuid": "5ccd896c-1ada-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.28.168:55385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966059, "uuid": "5d4fac84-1ada-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.210.119:35175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966117, "uuid": "7fb8556b-1ada-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.235.139.196:36439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966117, "uuid": "7fe7ba56-1ada-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.210:52256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966300, "uuid": "ecb922ed-1ada-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.110.18:39100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966409, "uuid": "2dea8250-1adb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://harddense.boynitsameow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966592, "uuid": "9ad6a09d-1adb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://9smjiz.boynitsameow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966659, "uuid": "c2dbd01a-1adb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.80:52589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966719, "uuid": "e6c4706e-1adb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.210.119:35175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966768, "uuid": "03c954d2-1adc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.126.177:35214/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966888, "uuid": "4b943e7e-1adc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://im4g-path.boynitsameow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966945, "uuid": "6d916dc8-1adc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/cnctest", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772966945, "uuid": "6d917456-1adc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/bot_windows.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772967073, "uuid": "b9c60e29-1adc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.99.14:53549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772967138, "uuid": "e02d402f-1adc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.210:52256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772967429, "uuid": "8dc4fa10-1add-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tquq11g4.colitishatred.digital/?=check&&actmn=IGIRAdjVetwzjGzH", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772967616, "uuid": "fd400df5-1add-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://grovv4-node.conesemison.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772967851, "uuid": "896ab89e-1ade-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.68.85:56157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772967912, "uuid": "ad7a55de-1ade-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://81mtae9.conesemison.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772968208, "uuid": "5deacc89-1adf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tri-venor.conesemison.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772968220, "uuid": "6586535d-1adf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.82.74:48696/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772968398, "uuid": "cf3e0a2d-1adf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.26.177:47259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772968448, "uuid": "ed7b094c-1adf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://audiocast.conesemison.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772968513, "uuid": "13ff203a-1ae0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7903503838/isxodFn.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772968700, "uuid": "835f926c-1ae0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.234:46675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772968812, "uuid": "c5e3ab13-1ae0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-sys.goodtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772969112, "uuid": "7935c0bd-1ae1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.26.177:47259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772969115, "uuid": "7a874f8d-1ae1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ledger5-well.goodtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772969230, "uuid": "bf0baf82-1ae1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.137.173:53936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772969348, "uuid": "0577016a-1ae2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyp3r-stream.goodtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772969356, "uuid": "0ab4edc6-1ae2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.210.180:40672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772969357, "uuid": "0acaa178-1ae2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.210.180:40672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772969646, "uuid": "b74a7a01-1ae2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fgklagg.goodtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772970011, "uuid": "91195f90-1ae3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-5tor.overtmantram.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772970139, "uuid": "dd190b39-1ae3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.24.11:36571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772970310, "uuid": "433f3c88-1ae4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-p45s.overtmantram.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772970491, "uuid": "aefef7d3-1ae4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.51:33144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772970612, "uuid": "f73e4ec6-1ae4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sparrowmerg.overtmantram.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772970680, "uuid": "1f5bf910-1ae5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.20.13:37386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772970908, "uuid": "a7be36fc-1ae5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://binaryscale.overtmantram.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772971150, "uuid": "37a1d6c1-1ae6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.84.146:56285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772971151, "uuid": "382dfdb2-1ae6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.6.166:36273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772971693, "uuid": "7b4bda4f-1ae7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://inkcarry.dawnforest.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772971931, "uuid": "08faf311-1ae8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://carrierloose.dawnforest.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772972049, "uuid": "4fcf5b26-1ae8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8546791173/H8eEFNo.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772972349, "uuid": "02410b56-1ae9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://norven7en.dawnforest.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772972598, "uuid": "96ca2c5e-1ae9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.51:33144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772972658, "uuid": "babb628c-1ae9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.20.13:37386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772972767, "uuid": "fba368a4-1ae9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.96.26:58428/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772972827, "uuid": "1f1b7938-1aea-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://xg38z.dawnforest.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772972949, "uuid": "67e06b69-1aea-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.206.7:45551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772973133, "uuid": "d56b03f0-1aea-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://v16m.emberfield.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772973447, "uuid": "90aa98bf-1aeb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.242.46:35037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772973492, "uuid": "abebcba0-1aeb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://norfluxex2.emberfield.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772973793, "uuid": "5f27a03b-1aec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oas1-sheet.emberfield.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772973849, "uuid": "806fc087-1aec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.54.215:43744/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772973910, "uuid": "a4ad1edb-1aec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.54.215:43744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772974087, "uuid": "0e4b1e41-1aed-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://taltideal3.emberfield.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772974334, "uuid": "a1a0bb78-1aed-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.133.100.187:40255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772974390, "uuid": "c2a37a6a-1aed-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://g755rs.crimsonridge.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772974403, "uuid": "caa1d8ce-1aed-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.230.121:53155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772974687, "uuid": "741755b1-1aee-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub-path.crimsonridge.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772974999, "uuid": "2dadb4a1-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.84.222.217:43870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772975050, "uuid": "4c93d73d-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gr1m-mark.crimsonridge.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772975170, "uuid": "93c7a994-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.206.7:45551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772975171, "uuid": "945273e4-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.242.46:35037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772975231, "uuid": "b82aee74-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.225.134:44891/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772975287, "uuid": "d9ccce85-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://clipwes.crimsonridge.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772975299, "uuid": "e07b0cb3-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.174.147.26:58951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772975357, "uuid": "0366d26f-1af0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.194.17:33621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772975837, "uuid": "21545520-1af1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.230.121:53155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772976020, "uuid": "8e3babf5-1af1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.174.147.26:58951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772976191, "uuid": "f43415f0-1af1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://shafun.silvermeadow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772976201, "uuid": "fa3507b3-1af1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.125.241.200:34930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772976264, "uuid": "1fe07cc4-1af2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.220.151:37507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772976487, "uuid": "a50a035b-1af2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://spooldiscover.silvermeadow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772976496, "uuid": "aa3f8377-1af2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.84.222.217:43870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772976909, "uuid": "a04602e5-1af3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://eopulls.silvermeadow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772977094, "uuid": "0ecbd88e-1af4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.194.17:33621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772977327, "uuid": "99bb0c18-1af4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://e2yy59.silvermeadow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772977520, "uuid": "0c570abc-1af5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.233:38485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772977530, "uuid": "12b2a994-1af5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.242.121:49460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772977630, "uuid": "4e5bfe00-1af5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://trinexex5.autumnbrook.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772977645, "uuid": "5726ef15-1af5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.85.112:58553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772977697, "uuid": "75fee3fc-1af5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.125.241.200:34930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772977873, "uuid": "dec83f84-1af5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://4uzr61.autumnbrook.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772977990, "uuid": "2474f16e-1af6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.243.146:35774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978169, "uuid": "8f71262a-1af6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://quormarkis8.autumnbrook.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978236, "uuid": "b71cb2b2-1af6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.3.215:46328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978294, "uuid": "d9b9dd77-1af6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.91.49:59468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978550, "uuid": "726e9384-1af7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.192.112:38237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978650, "uuid": "adff8602-1af7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hfze93t5.autumnbrook.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978659, "uuid": "b34cebb9-1af7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.3.215:46328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978840, "uuid": "1f4d2815-1af8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.248.197:57061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978886, "uuid": "3af97cd5-1af8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bundleroug.thunderplain.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772978890, "uuid": "3d5b57ee-1af8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.91.49:59468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772979263, "uuid": "1bbde45b-1af9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.85.112:58553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772979325, "uuid": "409f495f-1af9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.242.121:49460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772979488, "uuid": "a1aeadb1-1af9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tlccjre.thunderplain.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772979966, "uuid": "beb590da-1afa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://kel-meshet.thunderplain.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772979983, "uuid": "c8be5c48-1afa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.229.117:57964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980032, "uuid": "e59c7eab-1afa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.192.112:38237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980100, "uuid": "0e4ed7da-1afb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.220.151:37507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980637, "uuid": "4eaa3ddb-1afc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.44:34207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980637, "uuid": "4eaa5fdc-1afc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.161:49884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980637, "uuid": "4eb1efa7-1afc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.248.197:57061/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980638, "uuid": "4ee70cdc-1afc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.157.227:60882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980639, "uuid": "4fc889c1-1afc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.81.162:47775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980651, "uuid": "56988657-1afc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.238.189.72:47659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980927, "uuid": "fb563fef-1afc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://notifierflame.granitevalley.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772980990, "uuid": "20e9dabc-1afd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7824924311/u0J9Mv7.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981121, "uuid": "6ea7928e-1afd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.43.128:39298/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981167, "uuid": "8a230a0a-1afd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://valspro.granitevalley.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981303, "uuid": "db27b898-1afd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.127.226.170:38830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981304, "uuid": "dbc8affa-1afd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.229.117:57964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981414, "uuid": "1d5c88dc-1afe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://34lhj33.granitevalley.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981529, "uuid": "621989ec-1afe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.245.77:41205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981768, "uuid": "f0ba000b-1afe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://extendnode.granitevalley.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772981775, "uuid": "f4f7b200-1afe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.173.225:56483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772982136, "uuid": "cbbb4625-1aff-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://granit3-beam.summitgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772982427, "uuid": "7932bb95-1b00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://reedfreigh.summitgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772982623, "uuid": "edf9837c-1b00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.78.2:40299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772982908, "uuid": "9803a17f-1b01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mpthp.summitgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772982921, "uuid": "9fed5ded-1b01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.43.128:39298/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772982921, "uuid": "9ff583f7-1b01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.245.77:41205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772982936, "uuid": "a8a7bd91-1b01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.203.7:56782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772982983, "uuid": "c4b609e6-1b01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.81.162:47775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772983338, "uuid": "9883580a-1b02-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.203.7:56782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772983389, "uuid": "b6809301-1b02-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelnex2or.summitgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772983520, "uuid": "04d95272-1b03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.9:49664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772983645, "uuid": "4f9651c5-1b03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.135.250:35459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772983659, "uuid": "577e47f9-1b03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.239.32:50330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772983808, "uuid": "b0b9741d-1b03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://live-coupo.harborcliff.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772984114, "uuid": "672ba8f1-1b04-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://eenlgmi.harborcliff.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772984118, "uuid": "68fe0bdf-1b04-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.181.172:44178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772984414, "uuid": "199733fe-1b05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://1ayo-route.harborcliff.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772984480, "uuid": "40eefa69-1b05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.9:49664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772984714, "uuid": "ccb525aa-1b05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://5un-craft.harborcliff.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772985127, "uuid": "c26f222c-1b06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hollowcatalog.breezefield.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772985436, "uuid": "7ae953a6-1b07-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.135.250:35459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772985552, "uuid": "bfbab205-1b07-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://packecle.breezefield.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772986025, "uuid": "da273c38-1b08-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://royalstream.breezefield.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772986274, "uuid": "6e37430d-1b09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.81.137:56547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772986446, "uuid": "d50cea8d-1b09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fr4me-hinge.breezefield.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772986701, "uuid": "6cbedeb8-1b0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.229.81:50685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772986871, "uuid": "d204e721-1b0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://navig-node.navignord.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772986930, "uuid": "f587dbea-1b0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Sof1st1s/Astralis-Client/releases/download/1.0.3/Astralis.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ToxicEye", "colour": "#9eee58", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772986934, "uuid": "f7e35856-1b0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.121.83.226:40210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987112, "uuid": "61ae42ab-1b0b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nord-v01.navignord.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987123, "uuid": "683fdcb2-1b0b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.22.183:46342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987413, "uuid": "15049883-1b0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://navig-sync.navignord.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987589, "uuid": "7e048a84-1b0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/even88813-hash/anticheat/raw/refs/heads/main/Scottish/Software_2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987590, "uuid": "7e97d353-1b0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/even88813-hash/anticheat/main/Scottish/Software_2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987650, "uuid": "a2a98772-1b0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://zxjasjkask1992.sbs/load.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987656, "uuid": "a601ad5a-1b0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.56.232.109:39091/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987889, "uuid": "30cbdc0b-1b0d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://zverda.space/FileArchiver.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772987891, "uuid": "320545e3-1b0d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nord-base.navignord.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772988252, "uuid": "096dab4b-1b0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://excit-hub.excitfollower.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772988429, "uuid": "72c7c9dd-1b0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.81.137:56547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772988508, "uuid": "a1ab9367-1b0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.229.81:50685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772988670, "uuid": "024cf880-1b0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://foll-v12.excitfollower.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772988790, "uuid": "4a310773-1b0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.121.83.226:40210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772988929, "uuid": "9caeafd5-1b0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.45.103:55572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772988929, "uuid": "9cc16c49-1b0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.22.183:46342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772988973, "uuid": "b6de31ce-1b0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://excit-net.excitfollower.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989149, "uuid": "1fc9f1fb-1b10-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://foll-flow.excitfollower.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989394, "uuid": "b1bb9e1c-1b10-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.111.237:36675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989466, "uuid": "dce8f744-1b10-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.225.134:44891/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989515, "uuid": "fa303dbb-1b10-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oakum-gate.oakumsenile.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989581, "uuid": "214bd117-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/armv7l-linux-musleabihf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989581, "uuid": "2154fa4c-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/armv6-linux-musleabihf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989581, "uuid": "21af2a25-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/armv7m-linux-musleabi", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "249b65b7-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/armv5l-linux-musleabi", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "249da7cc-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/armv6-linux-musleabi", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "24a2270e-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/armv5l-linux-musleabihf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989586, "uuid": "24ad283c-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/arm-linux-musleabihf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "263dc2bc-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/armeb-linux-musleabihf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "263dc549-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/armeb-linux-musleabi", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "2640a40a-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/armv7r-linux-musleabihf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989589, "uuid": "2641d11c-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/armel-linux-musleabi", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989638, "uuid": "43b7c55d-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/armel-linux-musleabihf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989639, "uuid": "43c3cafe-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/arm-linux-musleabi", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989747, "uuid": "849baf6c-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://seni-v3.oakumsenile.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989763, "uuid": "8e0df4ab-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.178.185:53655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989870, "uuid": "ce02ada9-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.64:56667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772989993, "uuid": "173c1c4c-1b12-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oakum-unit.oakumsenile.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772990291, "uuid": "c888ecbf-1b12-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.127.205:48522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772990408, "uuid": "0e538239-1b13-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://seni-edge.oakumsenile.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772990709, "uuid": "c19c09e7-1b13-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://limb-core.limbsingle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991188, "uuid": "df2e2fa7-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sing-v44.limbsingle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991198, "uuid": "e5883471-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://bobnet.exiled.fit/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e59ee79c-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.55/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5b562ab-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://bobnet.exiled.fit/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5b63b18-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.55/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5c1fea4-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.55/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5c44d77-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://bobnet.exiled.fit/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5c4cca1-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://bobnet.exiled.fit/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5cb9dd2-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://bobnet.exiled.fit/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5d84e32-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://bobnet.exiled.fit/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5da9dff-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.55/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5e43af4-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.55/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5e48aec-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://bobnet.exiled.fit/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5e96ac2-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.55/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5eb2a2f-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://bobnet.exiled.fit/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991199, "uuid": "e5eb38c8-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://bobnet.exiled.fit/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991200, "uuid": "e6730559-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://bobnet.exiled.fit/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991203, "uuid": "e80dccad-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.55/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991204, "uuid": "e897f80a-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.55/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991204, "uuid": "e8bd2f22-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://bobnet.exiled.fit/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991204, "uuid": "e917f71d-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.55/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991205, "uuid": "e977b6cf-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.55/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991323, "uuid": "2fadf607-1b15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.119.111:60661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991373, "uuid": "4d627cb6-1b15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.178.185:53655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991487, "uuid": "9166ba9b-1b15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://limb-sync.limbsingle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991623, "uuid": "e288d940-1b15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.64:56667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772991909, "uuid": "8cd8460c-1b16-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sing-data.limbsingle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772992268, "uuid": "6342b81e-1b17-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://amp-vault.amperesilence.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772992509, "uuid": "f29ad4ea-1b17-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://silen-v05.amperesilence.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772992811, "uuid": "a665ac70-1b18-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://amp-hub.amperesilence.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772992825, "uuid": "aecf9b47-1b18-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.186.130:54913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772992934, "uuid": "f036ed7f-1b18-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.186.130:54913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772993110, "uuid": "590b59f5-1b19-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://silen-node.amperesilence.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772993316, "uuid": "d380a800-1b19-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fuckcartel.icu/download/gitlol", "Tag": [ { "name": "EpsilonStealer", "colour": "#DE198A", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772993471, "uuid": "30109711-1b1a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bobik-peak.bobikcleavage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772993715, "uuid": "c1566668-1b1a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://app.enekora.com/app/download.php", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772994131, "uuid": "b9b38ebf-1b1b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cleav-v6.bobikcleavage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772994135, "uuid": "bc217537-1b1b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.106.241.72:54655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772994487, "uuid": "8d8c1461-1b1c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bobik-sys.bobikcleavage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772994679, "uuid": "002e50a4-1b1d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.119.111:60661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772994849, "uuid": "6528aff0-1b1d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cleav-base.bobikcleavage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772995148, "uuid": "17a2ffa4-1b1e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://boy-site.boynitsameow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772995160, "uuid": "1efbe686-1b1e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.209.204:43462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772995276, "uuid": "642f8baa-1b1e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.227.204:59158/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772995456, "uuid": "cf5f30a6-1b1e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.31.189.32:57316/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772995629, "uuid": "3661c912-1b1f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.161.113:58763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772995747, "uuid": "7c755ed6-1b1f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://boy-net.boynitsameow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996168, "uuid": "77988173-1b20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://meow-run.boynitsameow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996465, "uuid": "28c830b2-1b21-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/xmrget.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996780, "uuid": "e4a64bb8-1b21-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://crm.razatelefonia.pro/new/c", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996781, "uuid": "e4c0929e-1b21-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://crm.razatelefonia.pro/new/k.php", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996829, "uuid": "01d84e8f-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cone-way.conesemison.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996842, "uuid": "091e1efc-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.238.189.72:47659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996886, "uuid": "23a201f1-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.239.100/phishing/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996886, "uuid": "23a95258-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.236.17/Ezo0HJkTPWyaIZsj84zzGw84qZIvRb_Fi4xFDrmII5/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996886, "uuid": "23c3cb3b-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87UO5QRjSgA9ZYu2mMr4qAYHXp0xa9MDpW78CPq3ZZI0foJZRhOe/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996887, "uuid": "24609ab9-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87UOzwVE3wvHPKN9X9ojr5dtNpWYrk1sBSK_BezQik_BGpbF06nJgoTxHoDD0ZXerxMKKZgmFjhD6bCpDxbk9TP7jnX2zqZ/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996888, "uuid": "248857b0-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://proxy005.vgate.app/winlocker/autoupdate/gamelauncher.ini?ver=1.3.0.20/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996889, "uuid": "256b31ff-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.89.253:8008/machine-1770334356004?ping=0B04034DCB70010B00011753475F2D3633343630353535343030353136333438383500010131000103352E3207EE0206019C3026822400011A5353756974652D352D322D32303230303630332D3131343630320001106663356364313165643838306332386608000200020001010B", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996889, "uuid": "2577c80a-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.89.253:8008/machine-1770334393741?ping=0B04034DCB70010B00011753475F2D3633343630353535343030353136333438383500010131000103352E3207EE0206019C3027158D00011A5353756974652D352D322D32303230303630332D3131343630320001106663356364313165643838306332386608000200020001010B", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996890, "uuid": "25e4adcb-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.94/access/JWrapper-Remote%20Access_os_jwwin-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996890, "uuid": "25f16634-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.94/access/JWrapper-Remote%20Access_winutils64-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996891, "uuid": "265e4ff3-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.110.191/beacon_encrypted.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996891, "uuid": "2661be2c-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.107.27:8008/access/JWrapper-Remote%20Access_os_jwwin-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996891, "uuid": "2669b2e3-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://casadoserralheirosaocarlos.com.br/ENCRYPT.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996891, "uuid": "2674aa30-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.239.100/webdav_server.py", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996891, "uuid": "26a6ea98-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.236.17/Ezo0HJkTPWyaIZsj86znTAzDNBQB3JFjrh2qin0yZKkczcchQlrXoftNLL8Sw64H_NJ8Kmljo7qZ5PpDzK-QGxm4L7zmhr1DsEdR/", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996891, "uuid": "26bbbaf6-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxy005.vgate.app/winlocker/autoupdate/gamelauncher.ini?ver=1.3.0.20", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996891, "uuid": "26c4c665-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://x.tlpoe.com:8008/access/JWrapper-Remote%20Access_winutils64-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996891, "uuid": "26cb1b65-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.wintestwin.xyz/cloud/a.txt.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996892, "uuid": "26f5eb60-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://np.simpleuseai.com:3000/access/JWrapper-Remote%20Access_winutils64-00095171921-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996893, "uuid": "27a5e58c-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.107.27:8008/access/JWrapper-Remote%20Access-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996894, "uuid": "28316792-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://agent-client-stoarge.webredirect.org/access/JWrapper-Remote%20Access-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996895, "uuid": "28dbf4f4-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us06web.zoom.hiaa.us/Windows/download.php/", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996895, "uuid": "28f7eca3-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.239.100/bt/init.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996896, "uuid": "299fefdf-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://home-client-online-stetament.webredirect.org:8008/access/JWrapper-Remote%20Access_winutils64-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996896, "uuid": "29a041c1-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://x.tlpoe.com:8008/access/JWrapper-Remote%20Access_os_jwwin-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996897, "uuid": "29f3f6fd-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://home-client-online-stetament.webredirect.org:8008/access/JWrapper-Remote%20Access_os_jwwin-00075795303-archive.p2.l2", "Tag": [ { "name": "Simplerrm", "colour": "#C0ABF3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996897, "uuid": "2a02928a-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.94/access/JWrapper-Remote%20Access-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996897, "uuid": "2a542a1d-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us06web.zoom.us.chsh.us/Windows/download.php/", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996898, "uuid": "2a91e4b1-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://np.simpleuseai.com:3000/access/JWrapper-Remote%20Access_os_jwwin64-00095171921-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996899, "uuid": "2b117532-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://home-client-online-stetament.webredirect.org:8008/access/JWrapper-Remote%20Access-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996899, "uuid": "2b7b3626-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://agent-client-stoarge.webredirect.org/access/JWrapper-Remote%20Access_winutils64-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996903, "uuid": "2deb3c59-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dmv.uqoo.nl/a/Adobe.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996906, "uuid": "2f8f64b7-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ovv.uqoo.nl/la/Adobe.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996907, "uuid": "300357e9-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://x.tlpoe.com:8008/access/JWrapper-Remote%20Access-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996907, "uuid": "300a363d-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://agent-client-stoarge.webredirect.org/access/JWrapper-Remote%20Access_os_jwwin-00075795303-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996907, "uuid": "3013223e-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.89.253:8008/machine-1770334354275?ping=0B04034DCB70010B00011753475F2D3633343630353535343030353136333438383500010131000103352E3207EE0206019C30267B6900011A5353756974652D352D322D32303230303630332D3131343630320004FFFFFF8508000200020001010B/lossyproc?rand=0.65923539723784630.9375677345858592", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996908, "uuid": "30974fe8-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.89.253:8008/machine-1770334361325?ping=0B04034DCB70010B00011753475F2D3633343630353535343030353136333438383500010131000103352E3207EE0206019C302696ED00011A5353756974652D352D322D32303230303630332D3131343630320001106663356364313165643838306332386608000200020001010B", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996908, "uuid": "30c348d2-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.89.253:8008/machine-1770334355241?ping=0B04034DCB70010B00011753475F2D3633343630353535343030353136333438383500010131000103352E3207EE0206019C30267F2F00011A5353756974652D352D322D32303230303630332D31313436303200010E6E6F206D6174636820666F756E6408000200020001010B", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996908, "uuid": "30ec65b9-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://egydeals.store/Egydeal.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996909, "uuid": "3106f706-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://np.simpleuseai.com:3000/access/JWrapper-Remote%20Access-00095171921-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996909, "uuid": "314c59fd-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://download-app-service-conect.info/windows", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996913, "uuid": "33a93398-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.107.27:8008/access/JWrapper-Windows64JRE-00063527423-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996916, "uuid": "35458ccf-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us04web.zoom.us.pacl.us/Windows/download.php/", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996917, "uuid": "35f4f05c-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://np.simpleuseai.com:3000/access/JWrapper-Windows64JRE-00084000053-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996917, "uuid": "3601770c-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ov.uqoo.nl/ukc/Adobe.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996917, "uuid": "361821b3-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.94/access/JWrapper-Windows64JRE-00063527423-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996917, "uuid": "3627e062-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://x.tlpoe.com:8008/access/JWrapper-Windows64JRE-00063527423-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996918, "uuid": "36ede678-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.91.253/access/Remote%20Access-windows64-offline.exe?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996921, "uuid": "38898917-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://home-client-online-stetament.webredirect.org:8008/access/JWrapper-Windows64JRE-00063527423-archive.p2.l2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996923, "uuid": "39cd5502-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bulledesophros.top/access/Remote%20Access-macos-offline.dmg?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996955, "uuid": "4c738353-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.91.253/access/Remote%20Access-macos-offline.dmg?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996958, "uuid": "4ea94f92-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bulledesophros.top/access/Remote%20Access-macos-intel-offline.dmg?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996958, "uuid": "4eae9df2-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.86.89.251/access/Remote%20Access-macos-offline.dmg?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996958, "uuid": "4ecb1660-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.61.151.206/access/Remote%20Access-macos-intel-offline.dmg?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996969, "uuid": "5531cfdc-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.61.151.206/access/Remote%20Access-macos-offline.dmg?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "5567dc7c-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.86.89.251/access/Remote%20Access-macos-intel-offline.dmg?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "557f2829-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.91.253/access/Remote%20Access-windows32-offline.exe?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "558fe6fc-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.91.253/access/Remote%20Access-macos-intel-offline.dmg?language=en", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996970, "uuid": "55b52bdb-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://download-app-service-conect.info/android", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772996990, "uuid": "61a1cf28-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.52.63:56269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997009, "uuid": "6cddc86e-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://semi-v08.conesemison.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997089, "uuid": "9c5dd6a5-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/jsrzb0.msi", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997199, "uuid": "de42fe5c-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.163.28:34431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997313, "uuid": "21fe7693-1b23-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://shiftspace.creativemindsuaeu.com/wp-content/plugins/xvbmiag/pbbpojm.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997372, "uuid": "455d5503-1b23-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://thekingofarms.com/sssrtq.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997377, "uuid": "4847a08e-1b23-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.52.63:56269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997432, "uuid": "691d8f10-1b23-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cone-sync.conesemison.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997669, "uuid": "f603e6bc-1b23-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.104.126:34417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997911, "uuid": "869b669b-1b24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://semi-flow.conesemison.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772997970, "uuid": "a97a7cd5-1b24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.163.28:34431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998085, "uuid": "ee834e12-1b24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.110.191:53663/kunkun/jquery-3.3.1.min.js_", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998094, "uuid": "f3e1e602-1b24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://coffetime.xyz/crs/SeattleMass.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998151, "uuid": "15605a0b-1b25-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://coffetime.xyz/plg/plugin3.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998402, "uuid": "ab5804c0-1b25-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.194.227.46:37995/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998572, "uuid": "10714744-1b26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.41.116:47018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998626, "uuid": "30f42a6e-1b26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-logic.goodtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998700, "uuid": "5cfb72a3-1b26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.40.125:41914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772998819, "uuid": "a3889e2d-1b26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.90:33405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772999180, "uuid": "7b1c4c2e-1b27-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.248.192:52902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772999229, "uuid": "97dc503e-1b27-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://time-v09.goodtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772999712, "uuid": "b7e39aaa-1b28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-gate.goodtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772999792, "uuid": "e76a9821-1b28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.112.216:32980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772999901, "uuid": "286f4965-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.188.155:38761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000080, "uuid": "9349d5c3-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.40.125:41914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000089, "uuid": "9901e803-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.194.227.46:37995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000099, "uuid": "9e749f95-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.104.126:34417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000126, "uuid": "ae91b388-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://time-unit.goodtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000129, "uuid": "b046e6c7-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/kinsing", "Tag": [ { "name": "kinsing", "colour": "#e7ee20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000129, "uuid": "b08ac6c8-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/kinsing_aarch64", "Tag": [ { "name": "kinsing", "colour": "#e7ee20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000130, "uuid": "b1706847-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.175.212/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000130, "uuid": "b1716098-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.175.212/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000131, "uuid": "b17562c3-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.175.212/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000131, "uuid": "b17a8890-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.175.212/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000131, "uuid": "b17ad1bc-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.175.212/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000131, "uuid": "b17d6895-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.175.212/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000131, "uuid": "b17f6be0-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.175.212/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000131, "uuid": "b1821862-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.175.212/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000131, "uuid": "b189cec2-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.175.212/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000143, "uuid": "b8c92bdb-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.175.212/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000143, "uuid": "b8cac186-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.175.212/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000144, "uuid": "b962a4a8-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.122.227:49622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000187, "uuid": "d35a03a5-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/1s967k.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000188, "uuid": "d3b3dcac-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/a84jo4.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000192, "uuid": "d63d5783-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/cu4yv6.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000192, "uuid": "d6529c50-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/87ofjz.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000194, "uuid": "d71fa464-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/qtypxz.Ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000194, "uuid": "d779d510-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/dvl6ad.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000195, "uuid": "d7edf5f4-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/bzu5xb.Ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000488, "uuid": "8667aab0-1b2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://overt-ref.overtmantram.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000500, "uuid": "8d67f7da-1b2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.90:33405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000562, "uuid": "b29dce14-1b2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.248.192:52902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000909, "uuid": "81b9c080-1b2b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mant-v11.overtmantram.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000976, "uuid": "a981e1e5-1b2b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.100:35393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773000981, "uuid": "ac9ebf3c-1b2b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.188.155:38761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773001174, "uuid": "1fa2d7f0-1b2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.96.247:49977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773001343, "uuid": "8454f8dd-1b2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.112.216:32980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773001473, "uuid": "d1890630-1b2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.84.207:32917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773001513, "uuid": "e95a2e61-1b2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://overt-base.overtmantram.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773001646, "uuid": "389c9d98-1b2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.122.227:49622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773001688, "uuid": "51dcb1d6-1b2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mant-net.overtmantram.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773001763, "uuid": "7e4fdc2e-1b2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.4.159:60238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773001845, "uuid": "afa8034c-1b2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.232.15.46:46367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773001929, "uuid": "e14b9bec-1b2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://harvest-map.harvestgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773002177, "uuid": "7505c234-1b2e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.41.116:47018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773002238, "uuid": "9998735b-1b2e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.100:35393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773002347, "uuid": "da5d307d-1b2e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://grove-v01.harvestgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773002362, "uuid": "e3b220f4-1b2e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.127.92:45950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773002718, "uuid": "b7ab1947-1b2f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.253.93.84:45414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773002828, "uuid": "f90b41e7-1b2f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://harvest-sync.harvestgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773003153, "uuid": "bb08979a-1b30-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.84.207:32917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773003323, "uuid": "204b29eb-1b31-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.95.131.110:54900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773003365, "uuid": "397d03d2-1b31-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://grove-base.harvestgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773003666, "uuid": "ed106835-1b31-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://glac-point.glacierpeak.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773003852, "uuid": "5bed3eff-1b32-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.107.18/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773003920, "uuid": "8431ad43-1b32-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.253.93.84:45414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773004213, "uuid": "329de4d7-1b33-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://peak-v12.glacierpeak.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773004387, "uuid": "9a4b63cf-1b33-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://glac-net.glacierpeak.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773004570, "uuid": "0753ca4b-1b34-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://peak-flow.glacierpeak.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773004752, "uuid": "73fa4e99-1b34-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.106.247:54526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773004952, "uuid": "eb9023e1-1b34-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.42.179:45033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773005002, "uuid": "0916632e-1b35-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.68.85:56157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773005051, "uuid": "2678e33c-1b35-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-zone.starbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773005287, "uuid": "b2d0d50f-1b35-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bend-v3.starbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773005303, "uuid": "bc602687-1b35-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.152.148:33779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773005708, "uuid": "ade2a467-1b36-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-unit.starbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773006071, "uuid": "85fb0df0-1b37-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bend-edge.starbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773006487, "uuid": "7e14d2c5-1b38-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ford-core.ironford.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773006787, "uuid": "31226d78-1b39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-v44.ironford.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773006919, "uuid": "7f8d8b73-1b39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.105.136:38701/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773006979, "uuid": "a34355b4-1b39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.55:51103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773006980, "uuid": "a426c5e7-1b39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.239.74:42700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773007098, "uuid": "ea5d84e6-1b39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.228.89:33594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773007267, "uuid": "4ed94e76-1b3a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ford-sync.ironford.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773007747, "uuid": "6d4fda0f-1b3b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.175.251:57843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773007807, "uuid": "91088391-1b3b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-data.ironford.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773008300, "uuid": "b6eccfb3-1b3c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.239.74:42700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773008348, "uuid": "d3a4e9be-1b3c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lake-vault.lakegate.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773008418, "uuid": "fceb0706-1b3c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.105.136:38701/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773008418, "uuid": "fd3f7c45-1b3c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.30.141:57373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773008481, "uuid": "2296451d-1b3d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.80:52589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773008600, "uuid": "6977d130-1b3d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.5.7:40873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773008826, "uuid": "f06685c8-1b3d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-v05.lakegate.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773008893, "uuid": "1895436d-1b3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.144:54447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773008894, "uuid": "18c08993-1b3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.231.22:57182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009008, "uuid": "5ceeffd8-1b3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lake-hub.lakegate.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009017, "uuid": "62645601-1b3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.4.159:60238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009017, "uuid": "6276b154-1b3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.231.22:57182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009020, "uuid": "6413b508-1b3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.108.122:54737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009201, "uuid": "cfa7d074-1b3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.9.50:46115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009378, "uuid": "39a9c5b9-1b3f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.38.44:50444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009493, "uuid": "7dbf04fe-1b3f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-node.lakegate.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009616, "uuid": "c76d4ad0-1b3f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.118:59264/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009616, "uuid": "c77a3076-1b3f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.132.71:59593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773009851, "uuid": "53450cf1-1b40-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.31.189.32:57316/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773010029, "uuid": "bd46493c-1b40-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rock-spot.rockbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773010451, "uuid": "b8fd27f7-1b41-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.38.44:50444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773010577, "uuid": "03fddbb4-1b42-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.5.7:40873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773010579, "uuid": "051ecaa3-1b42-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.50.81:37352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773010628, "uuid": "22511c8c-1b42-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bend-v6.rockbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773010629, "uuid": "23167768-1b42-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.108.122:54737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773010698, "uuid": "4bfe0405-1b42-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.30.141:57373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773010822, "uuid": "95f4c6c1-1b42-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.118:59264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773011057, "uuid": "220e1530-1b43-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.114.13:34661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773011167, "uuid": "639296f6-1b43-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rock-sys.rockbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773011170, "uuid": "653dca70-1b43-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.132.71:59593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773011648, "uuid": "823d64e1-1b44-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://path-site.goldpath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773011889, "uuid": "11df0056-1b45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://f4gyiajw.impeachlizob.digital/?=check&&actmn=dTBgPoTLTlgAbTnO", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773012008, "uuid": "592eb7e1-1b45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-v77.goldpath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773012081, "uuid": "8494860f-1b45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.133.145:43860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773012250, "uuid": "e929f764-1b45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://path-net.goldpath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773012310, "uuid": "0cb9b1a2-1b46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.131.190:43483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773012437, "uuid": "5895ffb6-1b46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.25:35577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773012486, "uuid": "760691a2-1b46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-run.goldpath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773012619, "uuid": "c556bbff-1b46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.20.177:50595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773012794, "uuid": "2d657f01-1b47-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.63.10:57380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773013088, "uuid": "dcada8df-1b47-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dock-way.winddock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773013156, "uuid": "05788887-1b48-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.172.228:60809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773013219, "uuid": "2b0e284c-1b48-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.145:36174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773013390, "uuid": "90c219da-1b48-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-v08.winddock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773013634, "uuid": "220a3a9c-1b49-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.149.131:39767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773013809, "uuid": "8a679204-1b49-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dock-sync.winddock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773014113, "uuid": "3f9935ed-1b4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-flow.winddock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773014114, "uuid": "403d7d74-1b4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.25:35577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773014296, "uuid": "acf7e473-1b4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.20.177:50595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773014296, "uuid": "acff56ba-1b4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.133.145:43860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772943784, "uuid": "8089ee4f-1aa6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.160.130.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772953084, "uuid": "27d5fc2a-1abc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.239.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956506, "uuid": "1f6e2cea-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.173.143.118", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936525, "uuid": "99e524c4-1a95-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.93.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772959808, "uuid": "cf2786c8-1acb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.36.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936884, "uuid": "6f93fd4f-1a96-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.67.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936944, "uuid": "9368c7bb-1a96-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.226.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773001805, "uuid": "97c1cb97-1b2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.232.15.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772945466, "uuid": "6ad2a889-1aaa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.135.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772949725, "uuid": "557423f5-1ab4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.57.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772953864, "uuid": "f898498e-1abd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.160.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772973427, "uuid": "84ba98e7-1aeb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.252.242.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772951525, "uuid": "863ae72c-1ab8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.253.99.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956084, "uuid": "23f8f473-1ac3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.112.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773002345, "uuid": "d9420d6a-1b2e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.127.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772944325, "uuid": "c2c1e467-1aa7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.58.39.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997185, "uuid": "d5d610f2-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.163.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772929744, "uuid": "d00bb06d-1a85-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.51.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772970666, "uuid": "1716ff23-1ae5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.20.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772947145, "uuid": "53b5c165-1aae-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.37.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772982906, "uuid": "96e75c75-1b01-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.203.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772952425, "uuid": "9ebfd947-1aba-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.109.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773012606, "uuid": "bd9d0237-1b46-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.20.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772979965, "uuid": "bdbdd08b-1afa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.229.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772977626, "uuid": "4b74e37f-1af5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.85.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989385, "uuid": "accd355b-1b10-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.111.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773008884, "uuid": "12e23b13-1b3e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.231.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939465, "uuid": "71c93660-1a9c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.57.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978224, "uuid": "b022f9c5-1af6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.3.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772943724, "uuid": "5ccbbacb-1aa6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.30.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772948226, "uuid": "d7f79da7-1ab0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.248.130.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773006964, "uuid": "9a8d1e43-1b39-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.239.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772959746, "uuid": "aa2d8a71-1acb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.71.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772977506, "uuid": "044d4bb0-1af5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.242.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772968686, "uuid": "7adc648e-1ae0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773012063, "uuid": "79d51cbb-1b45-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.133.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773003307, "uuid": "168530d6-1b31-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.95.131.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773005285, "uuid": "b18a2075-1b35-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.152.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772929563, "uuid": "6439bd9f-1a85-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.144.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772999165, "uuid": "71d82c4e-1b27-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.248.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773008405, "uuid": "f587104a-1b3c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.30.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773008587, "uuid": "61a27fcf-1b3d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.5.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773013145, "uuid": "feb73f9e-1b47-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.172.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772959024, "uuid": "fc1e88af-1ac9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.74.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773008884, "uuid": "12e261b2-1b3e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.77.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772998685, "uuid": "53f97f83-1b26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.40.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940966, "uuid": "f0cd09f8-1a9f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.128.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772938685, "uuid": "a10f3508-1a9a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.179.232.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772945466, "uuid": "6ad2589c-1aaa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.226.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772957765, "uuid": "0dd817f6-1ac7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.232.143.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773002706, "uuid": "b0b6d3fb-1b2f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.253.93.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989745, "uuid": "836a9b8d-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.178.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772962745, "uuid": "a5cb5096-1ad2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.84.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772937308, "uuid": "6c13d960-1a97-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.187.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772968206, "uuid": "5d03c67a-1adf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.82.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772995265, "uuid": "5d3caab8-1b1e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.227.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773007085, "uuid": "e2c4b2fb-1b39-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.228.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004925, "uuid": "db1bddff-1b34-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.42.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936404, "uuid": "51bfd567-1a95-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.54.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773012784, "uuid": "27cd0a9d-1b47-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.63.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963045, "uuid": "58f04f49-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.105.241", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996885, "uuid": "233485e9-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.107.27", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996885, "uuid": "2344b558-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.110.191", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996885, "uuid": "2335006c-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.91.253", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773000124, "uuid": "ad8a9111-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.226.175.212", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963045, "uuid": "58efb084-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.86.89.251", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996886, "uuid": "2348c353-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.86.89.253", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004744, "uuid": "6f976091-1b34-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.106.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773001445, "uuid": "c0b9b73d-1b2c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.84.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936525, "uuid": "99e540be-1a95-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.32.84.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772992806, "uuid": "a3fcc941-1b18-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.186.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773001744, "uuid": "733538d0-1b2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.4.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772983625, "uuid": "438af8a7-1b03-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.239.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772999765, "uuid": "d7d92e4e-1b28-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.112.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773007743, "uuid": "6b27b794-1b3b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.175.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772986265, "uuid": "68e94fff-1b09-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.81.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772970485, "uuid": "ab699763-1ae4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.177.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772971145, "uuid": "348ce9d1-1ae6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.6.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772929505, "uuid": "415c13f6-1a85-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.86.111.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772984412, "uuid": "189bb0cf-1b05-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "1ayo-route.harborcliff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772964185, "uuid": "004517bb-1ad6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "1n5igh6-lab.bobikcleavage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772960526, "uuid": "7b4080f0-1acd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "1pqv53qc.dumbbellshower.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773003845, "uuid": "5741b86f-1b32-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.189.107.18", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954224, "uuid": "cf35288f-1abe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "212.46.33.16", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996885, "uuid": "23334866-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.225.94", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963121, "uuid": "86260ab8-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.236.17", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963045, "uuid": "58ee4a28-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.239.100", "Tag": [ { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772966046, "uuid": "55853f77-1ada-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.210.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772933225, "uuid": "ead6565f-1a8d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.0.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772930226, "uuid": "ef04d264-1a86-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.34.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987106, "uuid": "5e06812a-1b0b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.22.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772966645, "uuid": "babec4e0-1adb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.15.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946425, "uuid": "a6568052-1aac-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.133.100.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991306, "uuid": "25d4f4a5-1b15-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.119.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772975345, "uuid": "fc666e27-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.194.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772981524, "uuid": "5f57b956-1afe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.245.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773013206, "uuid": "23068a27-1b48-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.254.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772986924, "uuid": "f1c94265-1b0a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.121.83.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996973, "uuid": "577aa2a0-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.52.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773012425, "uuid": "5177a0df-1b46-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.126.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772962685, "uuid": "82600198-1ad2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.176.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773000124, "uuid": "ad8b6db7-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.219.122.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946905, "uuid": "c4a21a1f-1aad-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.105.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772974385, "uuid": "c0290ccd-1aed-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.230.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772981406, "uuid": "18c4f169-1afe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "34lhj33.granitevalley.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939284, "uuid": "05fcac67-1a9c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.68.41.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773009006, "uuid": "5b99e3a2-1b3e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.108.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772980624, "uuid": "46b6bddc-1afc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.157.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772959625, "uuid": "626d1ee6-1acb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.173.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773012306, "uuid": "0a98c543-1b46-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.131.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772957345, "uuid": "131a8daa-1ac6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.196.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772948824, "uuid": "3c962ff1-1ab2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.204.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772977985, "uuid": "21e23299-1af6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.243.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978284, "uuid": "d42e025a-1af6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.91.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772953744, "uuid": "b126163b-1abd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.38.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772986685, "uuid": "63099530-1b0a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.229.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772998565, "uuid": "0c38971e-1b26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.41.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772952784, "uuid": "750286de-1abb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.121.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963045, "uuid": "58ee93e1-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.61.149.19", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963045, "uuid": "58eeead1-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.61.151.206", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772977871, "uuid": "ddc0d628-1af5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "4uzr61.autumnbrook.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940246, "uuid": "43a2333c-1a9e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.140.18.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772949245, "uuid": "375084e0-1ab3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.45.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773001144, "uuid": "0db94a27-1b2c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.96.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772984107, "uuid": "62d64a8b-1b04-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.181.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772944325, "uuid": "c2c1e1ab-1aa7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.188.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772931725, "uuid": "6c7afcf2-1a8a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.71.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978824, "uuid": "1583aaa0-1af8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.248.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772984713, "uuid": "cba4459c-1b05-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "5un-craft.harborcliff.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772980624, "uuid": "46b6e2d7-1afc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.81.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772976249, "uuid": "16b4f4d5-1af2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.220.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773010565, "uuid": "fcd42101-1b41-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.50.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772975286, "uuid": "d8cdd48c-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.174.147.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772931365, "uuid": "95cdf21d-1a89-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.24.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772965205, "uuid": "6012d617-1ad8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.143.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772947445, "uuid": "06a6ec0f-1aaf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.19.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772964124, "uuid": "dbfc4dbb-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.29.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772973845, "uuid": "7e10aa7f-1aec-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.54.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772983625, "uuid": "438b2e5f-1b03-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.135.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772976185, "uuid": "f0eb8667-1af1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.125.241.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772961850, "uuid": "905c6d95-1ad0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "7axh.limbsingle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772967910, "uuid": "ac5031a7-1ade-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "81mtae9.conesemison.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772974985, "uuid": "259e090a-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.84.222.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772966590, "uuid": "99ba8df9-1adb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "9smjiz.boynitsameow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996886, "uuid": "23b5c562-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "agent-client-stoarge.webredirect.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772931785, "uuid": "90199282-1a8a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-base.nimbura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772932685, "uuid": "a91450af-1a8c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-logic.nimbura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956572, "uuid": "46a7cd53-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ameyiando.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772992807, "uuid": "a43b49fd-1b18-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "amp-hub.amperesilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772992265, "uuid": "611cceee-1b17-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "amp-vault.amperesilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772993706, "uuid": "bc686d3a-1b1a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.enekora.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772968447, "uuid": "eca85ab2-1adf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "audiocast.conesemison.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772952848, "uuid": "9a9fd228-1abb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "axon-ref.axonia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772951285, "uuid": "f74f777e-1ab7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "axon-v2.axonia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955968, "uuid": "de8f6b1e-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeibqcivjhwg2msil5g62did64uhtptlf7epidbrat4gexerzfv5mmq.ipfs.dweb.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772962165, "uuid": "4c85e973-1ad1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bandwidt-mesh.limbsingle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773006068, "uuid": "846dcf4b-1b37-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bend-edge.starbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773005285, "uuid": "b197d686-1b35-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bend-v3.starbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773010626, "uuid": "217ea078-1b42-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bend-v6.rockbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772970907, "uuid": "a6d91f5f-1ae5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "binaryscale.overtmantram.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772993465, "uuid": "2c9ad970-1b1a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bobik-peak.bobikcleavage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772994484, "uuid": "8bb76990-1b1c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bobik-sys.bobikcleavage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991184, "uuid": "dcfe3e21-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bobnet.exiled.fit" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772995745, "uuid": "7b5d9cd5-1b1f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "boy-net.boynitsameow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772995145, "uuid": "1596c390-1b1e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "boy-site.boynitsameow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963046, "uuid": "598c2cf9-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bulledesophros.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978884, "uuid": "39bd4283-1af8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bundleroug.thunderplain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772971929, "uuid": "0823a4be-1ae8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "carrierloose.dawnforest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956509, "uuid": "20e77fe7-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "casadoserralheirosaocarlos.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772994845, "uuid": "62feb530-1b1d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cleav-base.bobikcleavage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772994124, "uuid": "b59539e1-1b1b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cleav-v6.bobikcleavage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772975286, "uuid": "d8f255a9-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "clipwes.crimsonridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963405, "uuid": "2f82ee5a-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloudaxis.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955671, "uuid": "2dc38702-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cocinanikkei.com.pe" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772998090, "uuid": "f159417e-1b24-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "coffetime.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997426, "uuid": "653c1850-1b23-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cone-sync.conesemison.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996823, "uuid": "fe46a944-1b21-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cone-way.conesemison.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772964369, "uuid": "6dd5ac82-1ad6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cr3s9-mesh.bobikcleavage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772928127, "uuid": "0c268905-1a82-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "creek-base.shadowcreek.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996768, "uuid": "dd3e6fc8-1b21-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "crm.razatelefonia.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955666, "uuid": "2a5ff29f-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "crypterrrrr.42web.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772939045, "uuid": "775ed91c-1a9b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dist-core.fractalis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940666, "uuid": "3da36c20-1a9f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dist-hub.fractalis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996890, "uuid": "25d7a7c8-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dmv.uqoo.nl" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773013807, "uuid": "895cc202-1b49-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dock-sync.winddock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773013086, "uuid": "db59882a-1b47-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dock-way.winddock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996886, "uuid": "2361374c-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "download-app-service-conect.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772952725, "uuid": "5179a976-1abb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "download-version.1-45-1.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772977326, "uuid": "98bb4851-1af4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "e2yy59.silvermeadow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772984109, "uuid": "64255f13-1b04-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "eenlgmi.harborcliff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996893, "uuid": "27aee473-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "egydeals.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772976906, "uuid": "9ed48920-1af3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "eopulls.silvermeadow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772988248, "uuid": "06a8cd7a-1b0e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "excit-hub.excitfollower.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772988970, "uuid": "b51c08bf-1b0f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "excit-net.excitfollower.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987647, "uuid": "a06d2d66-1b0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "exonautis.fr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772945106, "uuid": "94583815-1aa9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext-sync.tensora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772943908, "uuid": "ca010fd0-1aa6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext-vault.tensora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772981767, "uuid": "efd0b998-1afe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "extendnode.granitevalley.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773011885, "uuid": "0f80b2eb-1b45-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "f4gyiajw.impeachlizob.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772969645, "uuid": "b67714ad-1ae2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fgklagg.goodtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996887, "uuid": "23f4ba3c-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "files.wintestwin.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772938207, "uuid": "8438f469-1a99-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fix-point.stabulis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989145, "uuid": "1da70e93-1b10-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "foll-flow.excitfollower.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772988668, "uuid": "016ac383-1b0f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "foll-v12.excitfollower.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773006484, "uuid": "7c89dfa6-1b38-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ford-core.ironford.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773007265, "uuid": "4df7197d-1b3a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ford-sync.ironford.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772986445, "uuid": "d4211314-1b09-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fr4me-hinge.breezefield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772943424, "uuid": "a99722f0-1aa5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "frac-run.fractalis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772940065, "uuid": "d7b34b71-1a9d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "frac-v08.fractalis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772993232, "uuid": "a15747e4-1b19-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fuckcartel.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772974386, "uuid": "c03fed12-1aed-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "g755rs.crimsonridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773009486, "uuid": "79a838ac-1b3f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-node.lakegate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773008824, "uuid": "ef7b1303-1b3d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-v05.lakegate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772934606, "uuid": "21981c91-1a91-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gen-flow.quantoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772933706, "uuid": "092cfd7d-1a8f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gen-unit.quantoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004385, "uuid": "9978b169-1b33-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "glac-net.glacierpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773003665, "uuid": "ec335675-1b31-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "glac-point.glacierpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773012485, "uuid": "752e7228-1b46-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-run.goldpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773012006, "uuid": "57deefab-1b45-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-v77.goldpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772999710, "uuid": "b6ed29a1-1b28-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-gate.goodtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772998625, "uuid": "30056b0f-1b26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-logic.goodtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772975049, "uuid": "4b904ec4-1aef-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gr1m-mark.crimsonridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772982132, "uuid": "c9570426-1aff-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "granit3-beam.summitgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773003364, "uuid": "38b0f006-1b31-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "grove-base.harvestgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773002345, "uuid": "d94e95b5-1b2e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "grove-v01.harvestgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772967608, "uuid": "f89d7b54-1add-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "grovv4-node.conesemison.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772966407, "uuid": "2cb97698-1adb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "harddense.boynitsameow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773001925, "uuid": "df3ed1d0-1b2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "harvest-map.harvestgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773002825, "uuid": "f7be87c6-1b2f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "harvest-sync.harvestgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978644, "uuid": "aaba5fca-1af7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hfze93t5.autumnbrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772985125, "uuid": "c181cd5e-1b06-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hollowcatalog.breezefield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996889, "uuid": "2555c3cf-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-client-online-stetament.webredirect.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772974686, "uuid": "7322f259-1aee-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub-path.crimsonridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772969345, "uuid": "03bbdc41-1ae2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyp3r-stream.goodtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772961546, "uuid": "db532527-1acf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-s4mp.limbsingle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772966886, "uuid": "4a6dc87f-1adc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "im4g-path.boynitsameow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772971685, "uuid": "769735f9-1ae7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "inkcarry.dawnforest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773007805, "uuid": "8fc94361-1b3b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-data.ironford.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773006785, "uuid": "301cdadb-1b39-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-v44.ironford.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772979965, "uuid": "bdcf28cc-1afa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "kel-meshet.thunderplain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772961370, "uuid": "7264b484-1acf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelfluxor.oakumsenile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772983386, "uuid": "b4f10694-1b02-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelnex2or.summitgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772949306, "uuid": "5bb2b70b-1ab3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "kine-flow.kinetica.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946965, "uuid": "e8130ec8-1aad-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "kine-v07.kinetica.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773009006, "uuid": "5ba814c0-1b3e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lake-hub.lakegate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773008346, "uuid": "d2616b7c-1b3c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lake-vault.lakegate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772969108, "uuid": "76750dac-1ae1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ledger5-well.goodtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772990706, "uuid": "c04b4238-1b13-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "limb-core.limbsingle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991485, "uuid": "908a2a1e-1b15-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "limb-sync.limbsingle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772983806, "uuid": "af2d8d13-1b03-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "live-coupo.harborcliff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772960585, "uuid": "9e95d7ef-1acd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunarslo.oakumsenile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772952608, "uuid": "0bd3b4bf-1abb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-sync.axonia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772950385, "uuid": "dec3e454-1ab5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-way.axonia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773001684, "uuid": "4f90aaa6-1b2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mant-net.overtmantram.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773000906, "uuid": "7f99f558-1b2b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mant-v11.overtmantram.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996167, "uuid": "76dd8922-1b20-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "meow-run.boynitsameow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772982906, "uuid": "96fd9975-1b01-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mpthp.summitgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772964006, "uuid": "958153da-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mvxc.amperesilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772986870, "uuid": "d15cc9e0-1b0a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "navig-node.navignord.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987406, "uuid": "1153c8a4-1b0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "navig-sync.navignord.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963645, "uuid": "be32303b-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "nelavohomet.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772970009, "uuid": "8f76b59b-1ae3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-5tor.overtmantram.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772933465, "uuid": "79903bf3-1a8e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "nimb-net.nimbura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772932145, "uuid": "671ac83c-1a8b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "nimb-v02.nimbura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987885, "uuid": "2ed6536f-1b0d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "nord-base.navignord.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987109, "uuid": "603c3a93-1b0b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "nord-v01.navignord.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772973487, "uuid": "a8847114-1aeb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "norfluxex2.emberfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772972347, "uuid": "00f7a9be-1ae9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "norven7en.dawnforest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772980925, "uuid": "fa445d47-1afc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "notifierflame.granitevalley.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996886, "uuid": "23675ed9-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "np.simpleuseai.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989513, "uuid": "f9085487-1b10-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oakum-gate.oakumsenile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989985, "uuid": "123e4c81-1b12-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oakum-unit.oakumsenile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772973788, "uuid": "5c0f6e79-1aec-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oas1-sheet.emberfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955307, "uuid": "54a4fe12-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "openlineseguros.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996894, "uuid": "2854eb55-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ov.uqoo.nl" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773001508, "uuid": "e6bf19b3-1b2c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "overt-base.overtmantram.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773000484, "uuid": "8426e799-1b2a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "overt-ref.overtmantram.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996893, "uuid": "27f516c9-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ovv.uqoo.nl" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772985547, "uuid": "bcdc5a63-1b07-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "packecle.breezefield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773012246, "uuid": "e6afb473-1b45-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "path-net.goldpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773011645, "uuid": "80db3d61-1b44-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "path-site.goldpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004568, "uuid": "0678b8b2-1b34-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "peak-flow.glacierpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773004211, "uuid": "318eb82a-1b33-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "peak-v12.glacierpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772929085, "uuid": "46d29e0b-1a84-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "pgubdbmp.austeritymorg.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772929444, "uuid": "1d50221e-1a85-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "prim-sync.vortexis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772931189, "uuid": "2d37201e-1a89-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "prim-v14.vortexis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772970306, "uuid": "409d33d1-1ae4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-p45s.overtmantram.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996886, "uuid": "23cd7984-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "proxy005.vgate.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772964667, "uuid": "1f6fad63-1ad7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "qhye.bobikcleavage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772934845, "uuid": "b01590a2-1a91-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "quan-sys.quantoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772933885, "uuid": "74321453-1a8f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "quan-v5.quantoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772978167, "uuid": "8e10b94d-1af6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "quormarkis8.autumnbrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772982425, "uuid": "78435df3-1b00-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "reedfreigh.summitgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772956812, "uuid": "d5a9755d-1ac4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "repaicloud.navignord.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773010027, "uuid": "bc0a5a87-1b40-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rock-spot.rockbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773011165, "uuid": "62a0084d-1b43-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rock-sys.rockbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963168, "uuid": "a1db732e-1ad3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "roy46-cast.amperesilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772986024, "uuid": "d957663c-1b08-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "royalstream.breezefield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997909, "uuid": "851fecc1-1b24-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "semi-flow.conesemison.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997007, "uuid": "6b8bc13b-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "semi-v08.conesemison.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772990406, "uuid": "0d5ba23e-1b13-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "seni-edge.oakumsenile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772989745, "uuid": "83789fbc-1b11-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "seni-v3.oakumsenile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996893, "uuid": "27f2bf65-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sfacildevs.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772928425, "uuid": "bd833385-1a82-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "shad-net.shadowcreek.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772976187, "uuid": "f23bbf6a-1af1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "shafun.silvermeadow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955365, "uuid": "770b6a27-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "shariels.42web.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772993108, "uuid": "57e195c0-1b19-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "silen-node.amperesilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772992507, "uuid": "f1bf169f-1b17-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "silen-v05.amperesilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991907, "uuid": "8bebb8a2-1b16-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sing-data.limbsingle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772991186, "uuid": "de3c7d1b-1b14-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sing-v44.limbsingle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772959207, "uuid": "696294e6-1aca-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "solcoreet3.excitfollower.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772965265, "uuid": "83cb30de-1ad8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sp115-index.bobikcleavage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772970608, "uuid": "f4ad9a10-1ae4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sparrowmerg.overtmantram.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772976485, "uuid": "a3b41276-1af2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "spooldiscover.silvermeadow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772938925, "uuid": "2ff0a4e9-1a9b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stab-core.stabulis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772936645, "uuid": "e16fdf73-1a95-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stab-v33.stabulis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773005706, "uuid": "acb5d599-1b36-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-unit.starbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773005047, "uuid": "23c456ad-1b35-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-zone.starbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772947445, "uuid": "06b609a1-1aaf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-net.kinetica.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772946125, "uuid": "f3b31a4f-1aab-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-node.kinetica.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955485, "uuid": "beafbc0f-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-gate.modula.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772968809, "uuid": "c487ee35-1ae0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-sys.goodtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772974085, "uuid": "0d4c691c-1aed-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "taltideal3.emberfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772945526, "uuid": "8e6c50fb-1aaa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tens-base.tensora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772944566, "uuid": "524f3cab-1aa8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tens-v11.tensora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772961185, "uuid": "046a4071-1acf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "terminal-mark.oakumsenile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772997370, "uuid": "43e45ccb-1b23-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "thekingofarms.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773000124, "uuid": "ada67aca-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "time-unit.goodtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772999227, "uuid": "96f37890-1b27-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "time-v09.goodtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772979487, "uuid": "a0d96c1b-1af9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tlccjre.thunderplain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772967427, "uuid": "8cf00f9d-1add-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tquq11g4.colitishatred.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954407, "uuid": "3c5dda4e-1abf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-net.volumex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772953207, "uuid": "70ba4d09-1abc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-unit.volumex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772968206, "uuid": "5d0a6e6f-1adf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tri-venor.conesemison.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772977626, "uuid": "4b90b0ac-1af5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "trinexex5.autumnbrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772973125, "uuid": "d10ff71a-1aea-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "v16m.emberfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772981165, "uuid": "891ef423-1afd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "valspro.granitevalley.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772954586, "uuid": "a700599a-1abf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol-base.volumex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772953625, "uuid": "69ef52d7-1abd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol-v19.volumex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772931365, "uuid": "95d80116-1a89-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vort-data.vortexis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772930285, "uuid": "12366566-1a87-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vort-node.vortexis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773014108, "uuid": "3c984832-1b4a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-flow.winddock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773013385, "uuid": "8d7c94f7-1b48-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-v08.winddock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772955668, "uuid": "2bd1731f-1ac2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "winston.rf.gd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963945, "uuid": "716d1a25-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.172.86.68.175" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963828, "uuid": "2b55b787-1ad5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.nelavohomet.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772996887, "uuid": "23e770e4-1b22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "x.tlpoe.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772972825, "uuid": "1e3ead0d-1aea-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "xg38z.dawnforest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772962567, "uuid": "3bbd29fe-1ad2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "xvneiys.limbsingle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772963644, "uuid": "be0c2dda-1ad4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "zoom.us05-web.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987885, "uuid": "2ec80f3f-1b0d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "zverda.space" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772957826, "uuid": "320d373b-1ac7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "zx8895.navignord.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772987649, "uuid": "a1a9844e-1b0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "zxjasjkask1992.sbs" } ] } }