{ "Event": { "published": true, "date": "2025-03-08", "threat_level_id": 2, "info": "URLhaus IOCs for 2025-03-08", "timestamp": 1741478589, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "ec9ec6d2-d311-4382-bd38-e1143e2e6219", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1741392125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392125, "uuid": "1fbd0d7c-3143-4aaa-9ffc-2aa880d56b29", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392125, "uuid": "8ddc7318-c039-4959-84a4-a23094f4d142", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392125, "uuid": "64df6c81-8c3f-44d2-b122-7bb2599359b2", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392125, "uuid": "d7dc173b-1456-4edc-86f0-8e236e6995c6", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741392125, "uuid": "ff277264-25bf-4d9e-8f27-1bc06d1ac15c", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1741392244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392244, "uuid": "f1be2c4a-5957-4e7a-bff3-14ce451f3eac", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392244, "uuid": "78518933-7e0a-4c5b-ac91-a57c780295df", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392244, "uuid": "79f44c29-c732-4632-be40-412970718c5c", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392244, "uuid": "b50dd7c7-4e44-4193-8c7a-daa26f83a21a", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741392244, "uuid": "8a81c45b-2617-4b87-abe7-33cc543e0692", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1741392544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392544, "uuid": "e7f14d03-8632-46c1-8101-1521e6b1975a", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392544, "uuid": "3c23a141-fbbb-4cdd-a5af-c5de4f891dbf", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392544, "uuid": "d145f5be-c53a-42c5-9845-0d3f740e2109", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392544, "uuid": "4b606edf-22c1-4c85-8633-095283ffd81a", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741392544, "uuid": "c73df92d-ad62-4595-b11e-37bfbcd0a787", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1741393384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393384, "uuid": "220a70d1-5adf-4c5c-a940-e22775e16491", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393384, "uuid": "0c7c93c3-4d66-48bb-9b01-17e987d3da4f", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741393384, "uuid": "ff356ca5-8677-4cb5-96ea-364b1fd3cc3f", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741393384, "uuid": "7f04fdf7-dcbb-4f9e-83e6-5687a6953d6b", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741393384, "uuid": "db6ff3f7-ae1a-426e-9da7-bcf65727fd0e", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c9a38a1-fad9-11ef-aa53-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1741393522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393522, "uuid": "049c2a82-e32c-4922-8ec8-559d7ceb47b2", "comment": "Malware payload (AsyncRAT)", "value": "40ca1ead3549731f411d3245b59f9c7b", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393522, "uuid": "aaaf115a-97d6-44e1-9c90-c76df273fab7", "comment": "Malware payload (AsyncRAT)", "value": "a688bdcadb64c3035137eb8e9edb1f167216dc946ffe73308abc87a1da738bf1", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741393522, "uuid": "e7d9967c-e047-4d6d-9cab-1059f4ca34d7", "value": "T166235C4037988136E2BD4BB4ADF3D5418779E2676903CA596CC814EA2F13FC596036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741393522, "uuid": "995d4c97-6fd2-46a9-881d-60d0e5191ec9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741393522, "uuid": "c8254938-ad2c-47ca-a392-dd29b5dcd361", "value": "768:FOEuILWCKi+DiRtelDSN+iVo8Yb4geFgU3NeQRreDj6IvEgK/JPZVc6KN:FOtmRtKDs0zbvLGq6InkJPZVclN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741393522, "uuid": "4928f9b5-6cd9-4bcd-baa6-6bf46118c10d", "value": 48640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741393522, "uuid": "0c24b3e5-afc5-44a6-962b-3c4703110322", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5da10b6-fbb5-11ef-aa53-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1741394359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741394359, "uuid": "956a7381-0946-461c-b5b3-184a9a1b4ffc", "comment": "Malware payload (Amadey)", "value": "d8a7d8e3ffe307714099d74e7ccaac01", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741394359, "uuid": "dad5ecdb-c691-4980-b522-022a6c3facf3", "comment": "Malware payload (Amadey)", "value": "c5b5c385184b5c2d7ed666beb38bb10b703097573f7a6b42b7fdef78acf99c96", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741394359, "uuid": "d010d8eb-7184-4ce7-8d74-314e9b04ec46", "value": "T13C944A207816D032D62191B11FADFFF195ADA9269B710ADB7BC00E765E201E37A31F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741394359, "uuid": "48a2bcce-28f2-4b5d-aa92-97b4e5d5a7b4", "value": "738a9f5d52d683b5b6a4ba77d2da72af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741394359, "uuid": "722a0825-ee75-4c55-b755-f9b381fc144a", "value": "6144:5/RCey1AxsmF1cQxQ3KcTN3Wz40v1fwb6prdotQ6g0MQYSE2/H9yQ+iT5gc7AOcp:5/RCey1AxsmUQ63NmjyQ6g0MQYZc7cb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741394359, "uuid": "f47bc78a-56d0-48ab-a163-10b83e37f956", "value": 439296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741394359, "uuid": "bef47569-0903-4bff-8c2b-381c46e9ed45", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bc0f82e-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741394987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741394987, "uuid": "2f803b59-6867-494a-ad3c-157b4a23678a", "comment": "Malware payload", "value": "5672e84a99ae5b7286dc06ea4e3c3fb1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741394987, "uuid": "581d2495-ffc6-4c96-899f-b17560f1238d", "comment": "Malware payload", "value": "debf70a746add0211f22f15f24c531d29bdd6a45c3ca9f75676b6bee4a6098e0", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741394987, "uuid": "9e5ef8dc-96ce-47ed-84be-b12a2ce75fd3", "value": "T14755332B021ED7F2C88CB8244A5D5BB2795CF9FCDDA0629E1064B555C7332AC2DDBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741394987, "uuid": "b5e8e79c-7ee7-4cba-a6b0-6ec0fb51c641", "value": "24576:dEF1bxAprVCTUk/HkQPGuejXqnBmVvLn9l4FU+UbkGPl5wFPY6N4ZS8AtS51D6bZ:dWlGBrQOvGnBmDfxBkGPeJKuy3U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741394987, "uuid": "81810e31-9f04-40cc-834c-ebf42dc21987", "value": 1314366, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741394987, "uuid": "6f80c453-83f4-4819-a0eb-35383252556f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f192e46-fbc1-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741399448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399448, "uuid": "3a13810a-e4c1-4b47-a6cd-59677cf08211", "comment": "Malware payload", "value": "bd5e149b4181adead70c61fa25ea345e", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399448, "uuid": "cd379f6f-7a6f-4977-b0a3-cd7d2f432052", "comment": "Malware payload", "value": "851be5fc8514d638751e6145aec59a9c7e05e45bc68cb62a39c640b44e4fd7b0", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399448, "uuid": "085c4826-474b-42f2-b2a9-035cd367ef85", "value": "T17124F17E59115FC6122CB9ACC2F0A8437B7EFF71443D4F9A6E27B690A84005AD1BF6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399448, "uuid": "906714f4-724e-449e-b2a6-61a1c1077989", "value": "6144:7GZce+fAbxVLrbI5/lR/YG1Np1hxCr7k3:7GWf2LI5//YG1FhxCc3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741399448, "uuid": "aafc9da7-0d78-43fc-9aed-1cdb2723fd0e", "value": 213073, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399448, "uuid": "86f8ac54-762c-4cc5-97cc-151fe990996a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbf53673-fbc1-11ef-aa53-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1741399550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399550, "uuid": "53235d36-298f-453d-b6c7-18ca6ee51522", "comment": "Malware payload (Amadey)", "value": "6d506f3be64ae6907fd1449757c25f38", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399550, "uuid": "2caeaec5-57e4-4be8-bb37-d0df147d0c59", "comment": "Malware payload (Amadey)", "value": "6818be8f23c803efea44182efc386fcca9d518b5cc99d89465ed6c2120643fb6", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399550, "uuid": "63a7aded-0a5c-4067-bbf4-f3492912e60f", "value": "T1DC159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399550, "uuid": "8cd1ce5d-4708-44c9-a0b9-fa1e30015f4b", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399550, "uuid": "b21376b8-9138-40ea-bce6-db823b1b2d3f", "value": "24576:yqDEvCTbMWu7rQYlBQcBiT6rprG8a0ku:yTvC/MTQYxsWR7a0k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741399550, "uuid": "2df89987-b679-416e-8f5f-cda96159e619", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399550, "uuid": "9eb4191c-0adc-4d57-a2cc-80cb4166377e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ded89de-fbc2-11ef-aa53-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1741399715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399715, "uuid": "82df5bc3-b357-468d-ab58-c00ae39bf54f", "comment": "Malware payload (Stealc)", "value": "446b3f68bde3f2f86485003912778b9f", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399715, "uuid": "fa828e2f-fe93-4238-997b-484e7e0d7809", "comment": "Malware payload (Stealc)", "value": "b46e5c4c996bbc656efe09dad9900d1e10cf2d74944b6da1d48ae60fe8ace258", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399715, "uuid": "ff5abbc7-9fd3-4eb9-9133-093975649800", "value": "T1698533AA1C2CC7F2D2C6AB330B5B2F18B5B1AD1709B49E9F3B05F645DD42B1639944", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399715, "uuid": "7a0cd7b4-bbf3-4033-b756-cda2f752f3a4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399715, "uuid": "e3e7a55d-9b72-4f87-a41d-e5535a396b32", "value": "24576:BjFKvkBE7xJsPAXE1Ds4iWISSoYYHf7ncMIg7r1k7pbNTUcNii1+76sH6feEUi:akgxCPLjOSSoTVIHHd11+7T35i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741399715, "uuid": "507f60af-449e-4407-b35b-12a67b68e412", "value": 1804800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399715, "uuid": "7f54f3a0-d856-49c0-86c4-51ea75c32d31", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d042687c-fbc2-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741399960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399960, "uuid": "25ca88da-ab01-4983-9ac4-dd931f7619c1", "comment": "Malware payload", "value": "01d4d474ea8b1889e61cbab1196e94e8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399960, "uuid": "846b53c9-fbc9-461f-b55f-8136df1a1aca", "comment": "Malware payload", "value": "cdaabff322d1376eddf92bec694afc24c8490959955354688bc41b18bd86839a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399960, "uuid": "80dc5c87-e724-4e41-b5f1-c82308fbf39b", "value": "T116D54AA2B90975CFDC8F57788527CE466A5D02BD0B2904D3A86DE4FABD63CC012F6D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399960, "uuid": "1290dc22-7161-4728-bd7b-e705a87de29a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399960, "uuid": "f2afb1d8-0f0a-481f-8d2c-5e1181852a10", "value": "49152:U83fXLTI3bt0DXxvxjSZtaAsBZWJ4lD12qBb5YN/:U83f7T8SXxvxuZtaAUcJKUwG/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741399960, "uuid": "0dd4d5ec-7adc-4b25-b434-5b7ed4f8ad41", "value": 2981888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399960, "uuid": "953eb7fe-e5b7-4c7b-ad05-dd62a3c5224c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb59b223-fbc2-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741400006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400006, "uuid": "98883f2c-8d4a-48db-9c6e-f8515b8f80d1", "comment": "Malware payload", "value": "dff0edc2117f7054946afd6d2b9aa083", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400006, "uuid": "c452b60e-f799-408f-882b-541496e8cdaa", "comment": "Malware payload", "value": "cee7f5b5b7aa65b8a61302e7b89a82ec366db8feece3fa96bcf222ea631dd4c3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400006, "uuid": "0a8a0fb2-a68d-4f17-b2b3-c555d20fa1e4", "value": "T11095338C5661BE10CB197F72123266EEA120B4FEC8EF59E98E4E5064E55F3E760C40", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400006, "uuid": "664da0f1-d475-4ce7-a20b-e6ab02e69a78", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400006, "uuid": "25ea3813-ce62-4fa9-bdb6-bcb60fda6350", "value": "49152:5EGClRiEnUizAnYzPc+V16emmkEGvzh5oOjV4k5r9JSEw4:567bnBKorXFFQ15om4m9Jf7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741400006, "uuid": "1c7b972e-52e0-4655-8bf5-65f17543ce20", "value": 1892864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400006, "uuid": "56fd2f55-f39a-4ddd-a0dc-905380221c73", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "803cc408-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1741400181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400181, "uuid": "8ecdb43a-05aa-4650-a7e0-fe5a8cad9cd1", "comment": "Malware payload", "value": "138078dab6bde11ff844e8b701ca7111", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400181, "uuid": "344bb996-97c1-4a4b-9395-2f73528a4482", "comment": "Malware payload", "value": "b19315d1b547b6543a5d11a0c8ec8c17195299c8dc99d57e9d0ad5bfa6ec7a22", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400181, "uuid": "25dd365b-524b-45c6-9c73-1a3841474033", "value": "E44302E01761278C43B5D9753CDD305E85341A2F72EA2D102DABC18EF45A62268B7EFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400181, "uuid": "5db2a637-7609-44f9-9cbf-39479af83cd7", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAc:8D+CAXFYQChaAUk5ljnQp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741400181, "uuid": "8365088e-d163-4800-bc84-9f237e554324", "value": 55480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58330971-fbc5-11ef-aa53-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1741401271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741401271, "uuid": "c6054698-a701-44a0-88fc-2be387281fa3", "comment": "Malware payload (Stealc)", "value": "86eb1fab48430cdc8cc614b2cd6c4b48", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741401271, "uuid": "56a94d2c-748f-4e4d-8f56-3106da488c17", "comment": "Malware payload (Stealc)", "value": "554b597fc76474c9bcd0a1f8ab2ec4036bc41a8bfa8cd6d9ecdc623d456aa36c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741401271, "uuid": "8974a585-0cff-4430-9656-23742766f0d4", "value": "T12646330FE1B81891F8615B7458B32A432E38BDB52E76434BA72EDB1E5D7918077362", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741401271, "uuid": "a60703e8-cadf-483b-9fcb-a75ef49a2ea3", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741401271, "uuid": "6ca4d54b-cd6e-47d3-ad1f-79ca83075203", "value": "98304:IUHFzWdkH8vNiy7xNY5jiPcGV1Dwwfa5gpHoNaX7db7amgfl4V1u1UMhaUvOGwBJ:FFzWdDNiy6UP1uCMaLdzihUMhx+BbyUn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741401271, "uuid": "ae0963c5-ce8a-4798-9258-1ade5db2df3d", "value": 5648384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741401271, "uuid": "c86a74e5-aa9d-49b2-86b8-0df853ba46ae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0980b41-fbc5-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741401276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741401276, "uuid": "bfe62806-542d-4dff-9b24-f8ac2b097ca8", "comment": "Malware payload", "value": "41191c1f1747108fd7caabcb9a4dea65", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741401276, "uuid": "8bcd7be9-ed11-4fc7-8c81-0aab378475cd", "comment": "Malware payload", "value": "4a67bb709abefc3a4cfc0a6d762fbc0b22512b424e4ed8ce164248cd8b9409bd", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741401276, "uuid": "40d32b73-fc2d-4763-9f9c-357f74e0e6e0", "value": "T1989533162B318C31F365A336436755929A318A071D67E9EE0576A1E1FCB63783F33A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741401276, "uuid": "979462b9-82b9-4e0e-b557-2fa7cad36f93", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741401276, "uuid": "d4e82515-e75d-4a93-b67c-73dcd8f54924", "value": "49152:lJMLLByzvuEFE06gEdsmrLIMcdvoqZRSr1reuLFzz:lJMnByzNwdhLIpdvoqZRSpyI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741401276, "uuid": "1ffc2c76-dc99-40fa-b09c-6541c953796a", "value": 1941504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741401276, "uuid": "56adcaf6-c8ac-42b6-8874-43c2ef72bcf5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38c95945-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741402713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402713, "uuid": "9f7cd173-70fa-498a-a2af-b4082beeabe0", "comment": "Malware payload", "value": "0e927b2f08618577995ba432d4ae1a3e", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402713, "uuid": "9b3097de-28b7-43c2-adca-1701216499d8", "comment": "Malware payload", "value": "738cc860b36dd0de360783387264676e48f320bf6dedb5fcd83aec32ecfa9c8c", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402713, "uuid": "439faaff-8343-4c89-843a-f7276967bb80", "value": "T1E653F87766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402713, "uuid": "65357fda-3be5-49a6-9e19-9bb489b35349", "value": "768:aA1fh41SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/t6wR1X1t1RB1pyd+2sAc:aA1fh41P6n20wR1X1t1RB1pydD1e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741402713, "uuid": "8ba53886-2789-493c-aefe-c68f60dcd922", "value": 64454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402713, "uuid": "ab9196c9-ee3b-4c9d-988b-696bbd97df49", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9b8cfd9-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741402902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402902, "uuid": "23d899e8-8db3-43e9-9543-3bd2fb56e802", "comment": "Malware payload", "value": "4635ea48ba2dcd3471fa6e3a005ecf0a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402902, "uuid": "b7ce6411-ab79-412c-9dfc-ff509a812774", "comment": "Malware payload", "value": "ec5707036254062a02465abae5ece9c0ddf484c46c90f1791c7fbf9a608746fd", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402902, "uuid": "7e96e3b9-91ca-42d7-be57-909b0f1ea395", "value": "T159E53952B5457ACFC18B27789927CDC2699D43B5871008C3E87A74BAAFE3CC711AED", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402902, "uuid": "c9080d31-b065-4423-9ba9-10c0c62a6b57", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402902, "uuid": "a9314fda-8eac-44e5-8b72-98d97b27171d", "value": "98304:rTLrRWt33Gra3Ul8xtihhxRPqAYtd98eaTz2:rTLrRWt33Gra3Ul8xYYtd9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741402902, "uuid": "27c82b96-9589-47af-8b1e-099f48d4b35d", "value": 3243520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402902, "uuid": "8597243b-123b-49fa-8392-d9aac57d8730", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64267d6e-ee5e-11ef-b8ac-82aee05be84a", "comment": "Malware payload", "timestamp": 1741404063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741404063, "uuid": "fb65fbaa-80e1-42bd-a49e-2f517c8b5638", "comment": "Malware payload", "value": "1b163b7d3b7460aa285b11f07d59cf26", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741404063, "uuid": "9dd16423-cf2f-405b-9e56-5aac46f2594f", "comment": "Malware payload", "value": "5be24ce88e70b069ed4df3a7e1be38bf2ae1ea23f1c846174143fc341a134b0d", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741404063, "uuid": "805f5910-1a01-4df3-aa65-a3042b811bcb", "value": "T1C564089ABC919A56D5D413BBBA6E85CE330323B8D2DF7103CD045F1876CA94F0E7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741404063, "uuid": "e87aac44-5d6e-4c65-bdc5-3a6d992f6f6e", "value": "3072:T2s/ITo7WCkybotgsJ913DhrbW4UYSx7Q:T2s/gAWuboqsJ9xcJxs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741404063, "uuid": "a960c184-eb13-49b6-9a6a-6280829d2172", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741404063, "uuid": "0e05c7a3-fd63-4048-90d9-2935767cc2c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0f5d6c7-fbce-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741405169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405169, "uuid": "0ffa99f6-a4d5-4238-b5d8-fd15de99ed79", "comment": "Malware payload", "value": "e95cc6e1c79650f8c699b610fd6796fa", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405169, "uuid": "58571e47-dff6-4652-ba0a-023309c265a2", "comment": "Malware payload", "value": "733db18e0c146dbb130fa216500db3ac07a51b127832180861ca261de5558394", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741405169, "uuid": "44c834df-797f-485b-a7f6-1a89148a88bd", "value": "T16153E97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741405169, "uuid": "f1012077-2a33-4d25-a448-518ee9e43e86", "value": "768:aA1fh41SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/t6wR1X1t1RB1pyd12sAc:aA1fh41P6n20wR1X1t1RB1pydQ1e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741405169, "uuid": "e8af36ef-6163-444c-9ecd-fd53dd87c4f9", "value": 64454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741405169, "uuid": "f79b38f9-cd5a-4a09-a16c-65f47e6563c9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce25f49d-fa23-11ef-abc3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741405749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405749, "uuid": "d9ad4315-1c30-4304-a2f4-e3c11945da8e", "comment": "Malware payload (Mirai)", "value": "84597b4e86a02818478e8e9ef7c74485", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405749, "uuid": "e4ba2970-60ec-46a5-b507-2fb505655524", "comment": "Malware payload (Mirai)", "value": "28bb529e99c8730de533d64995979a491d6af643ddcd99997788ff945dc6b426", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741405749, "uuid": "f8558f5b-8603-42d4-91ab-5ef01c662260", "value": "T1CB334BC59AC3D8F4DC1506B13177FB365B36E13E5029EA87D79DAA37AC42912E2072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741405749, "uuid": "81b864ed-9bff-49d1-b4ec-4c79ded60c36", "value": "1536:7uld7p12jkVJCWsAmSffClhgmd6+H/nHqY4ec:7uldP2jkV0BSfORH/Hqh/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741405749, "uuid": "2f31fbad-57f5-414e-adab-8f36fa5d39d9", "value": 51036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741405749, "uuid": "377ef1d8-642d-4ef8-a437-2e4a9d35a7f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f414f805-fbd1-11ef-aa53-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1741406463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406463, "uuid": "002814e1-e2cd-47e7-bcbd-8785adbf1d5d", "comment": "Malware payload (Gafgyt)", "value": "405dcee6483503916dff1831cf8fa598", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406463, "uuid": "879510e1-dfda-4ecb-8d32-e0577abb00a0", "comment": "Malware payload (Gafgyt)", "value": "eb5304685569e3180cb79bc6144ddb4e7d9097ad83ab29ae2df1dee73d317951", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406463, "uuid": "c0ab8195-ea33-4031-9ad2-3e04c0dfcb8f", "value": "T1CA31808F60B295306DA9D91B33BAC824B1D5E08B54D99F5728FC38F40C8DE84A945B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406463, "uuid": "6efd561c-7437-42ab-90dc-983a1aa958a0", "value": "24:vfVcoLJfVnfVffVmGkn6XXfVa8NfV02fVa8pfVp9fVBFfVvDfVp9fVa8sfADfVaF:vioLJdtpciG2c+9/FRD9cmcF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741406463, "uuid": "a866c204-3065-4bb1-b3a3-c834aeb4e197", "value": 1851, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406463, "uuid": "e9ed0f61-8737-4718-ac1c-5c7d75c6d821", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c0c7331-fbd4-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741407523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407523, "uuid": "29dd5bb0-bc71-493e-8595-46000bcc6881", "comment": "Malware payload", "value": "41d564b8474609d58082d0a60f14f98b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407523, "uuid": "d49a438b-a09b-487c-98e5-796ac2a8ac73", "comment": "Malware payload", "value": "f96fee41785719de13ef37ccd224bdf94d743f21327f61ce1f7caa17a7ed7f41", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741407523, "uuid": "27b66ac0-f1f2-4192-a7d3-8cc29fa4e748", "value": "T1E026338EB877DB79ED8C7274FB9D88D30098BF5F38A870280704B59949A53416B673", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741407523, "uuid": "e9f81895-d11b-4624-a159-4fcc008dcd0f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741407523, "uuid": "3a386a2d-18e5-4078-b301-ef45da1510cc", "value": "98304:T6DLnvofvI3SaZXjo9Vw6/EIuuCvMSiW49pBmK:T+EI3jZXjo9V+fMSWBm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741407523, "uuid": "7e22074a-9f5d-4421-843c-094ea6408016", "value": 4677632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741407523, "uuid": "c655d44b-fb24-4e1c-a142-61f0562fb4c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a18994c-fa27-11ef-abc3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741408132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408132, "uuid": "2064f63a-d5cf-4735-b124-5cdf7e60ca5c", "comment": "Malware payload (Mirai)", "value": "da5f082847104367fefde63653084863", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "403", "colour": "#839433", "exportable": true, "hide_tag": false }, { "name": "dosbot", "colour": "#4365c5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "Micheal", "colour": "#7bc33b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mirai.TBOT", "colour": "#6c3f50", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "skids", "colour": "#a4e397", "exportable": true, "hide_tag": false }, { "name": "Supplys", "colour": "#855da7", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408132, "uuid": "e7b7963e-9675-4c66-b29d-9f7fc2916210", "comment": "Malware payload (Mirai)", "value": "6fc1f441c08b49ceb3083fa2a201d424c5282ec7a5cd2431bd017490ba2b23de", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "403", "colour": "#839433", "exportable": true, "hide_tag": false }, { "name": "dosbot", "colour": "#4365c5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "Micheal", "colour": "#7bc33b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mirai.TBOT", "colour": "#6c3f50", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "skids", "colour": "#a4e397", "exportable": true, "hide_tag": false }, { "name": "Supplys", "colour": "#855da7", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741408132, "uuid": "58e747b2-5818-410f-aff1-8de25ac0ccee", "value": "T1C973B61E2E26DFADFB6C823547F78E219358339626E0C184E15CE9015EB034D646FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741408132, "uuid": "7a122322-c8f1-41c1-9258-901e4a4a9c78", "value": "1536:FKBKC1576Ph/OUbdyCZNXdnmtlH+vvt6RO0rO:UIc57yh/pF02vUROAO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741408132, "uuid": "9bb92426-22ee-4911-acd8-4a74f124f6a6", "value": 75920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741408132, "uuid": "ae1443f4-2663-454d-a713-b5d237232cae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "623a389e-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1741409225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409225, "uuid": "d4d60ceb-1b39-4c77-a28b-ff7f2432d268", "comment": "Malware payload (Amadey)", "value": "50efc666b86b2e72b5a382daf6f49034", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409225, "uuid": "0f38bf02-1e7d-4f58-9dcf-a870b95c121c", "comment": "Malware payload (Amadey)", "value": "7817b60d8a52034bdfcaf9c0f08f52a86218e4cc44ffd2cb763d90aea26ea227", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409225, "uuid": "65f5270b-d786-4670-b9a3-8fa8939a139e", "value": "T128C33A213496C031DA5D567E18A8ABF487BD6914DFB00DD77B840E7B8E242C2EE34D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409225, "uuid": "22a71d9c-4074-437b-b287-11fefb829b32", "value": "fdb088ba51afbf555d7a0f495212d8f1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409225, "uuid": "ac1042e4-bc21-41a7-b6d0-fa2cf6c45abe", "value": "3072:jYZ27UeZm+wr7CImzEyv/Y4Z3SNqE4ZfYYOpf:ko7JfuCIsEyfZ3dYnpf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409225, "uuid": "a72cade8-1eb2-470c-86c0-5bb96afcac1d", "value": 126976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409225, "uuid": "3a0c66d9-f3d6-42e1-bb54-19c6361f57e3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62454ee1-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1741409225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409225, "uuid": "89475923-015e-457e-8394-9ea02ddafa30", "comment": "Malware payload (Amadey)", "value": "3f6c5625fc83f2db9559554f6d1ce3f2", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409225, "uuid": "dd6c1032-1c7c-46ce-ab14-4926f81b1691", "comment": "Malware payload (Amadey)", "value": "080ea1d225c77364abb02fbb1b65e9693654242ecc5c91f34c531ecf363a2f4c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409225, "uuid": "ee7f752f-b07c-4112-ad36-88df07d9fe46", "value": "T1CA557C0BA26141BCD4BBE1789A175A47F775704603709AEB07E446A63F13FE1AEBE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409225, "uuid": "fcb3e35b-135c-45bb-81ae-bba84e2370b5", "value": "3f175edea93fa7a76a78004d12de2235", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409225, "uuid": "1d0fbe3b-9857-4edb-a820-7c2cf01f2fb0", "value": "24576:CrR0NaOy0mK9yCksn6JCc2YkxfUyamitsDw+mLRaSOnW:CkHmiyCkhh2Bamituw+U86", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409225, "uuid": "98e75f4e-fd7c-4d63-8a07-a7f6c185b895", "value": 1282048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409225, "uuid": "33d66e42-b62f-4c0c-b2cd-74fb44f3138a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8662fa52-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1741409285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409285, "uuid": "6daa870b-f5a5-4ac6-a972-c4464a964f04", "comment": "Malware payload (Formbook)", "value": "0c51a13288bcb0e2a2b079cab664581c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409285, "uuid": "6ccf8974-352a-49f9-8115-e0da2ec5d77e", "comment": "Malware payload (Formbook)", "value": "5abb1f204de195fc1f09be72252132c60d22e6670182948e8384a6b45b4571bf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409285, "uuid": "70932c5c-3c49-4776-917c-3b53b916d0d2", "value": "T15E45BF2273DDC361CB669173BF6AB7016EBF38610630B85B2F980D7DA950172162D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409285, "uuid": "afc89c2e-06cd-4c90-aa61-193ffeb5cd9b", "value": "649f6ed9a4d576c154bbc0357156a4a4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409285, "uuid": "49cb0cec-352d-4197-a8f9-608790cf8415", "value": "24576:/u6J33O0c+JY5UZ+XC0kGso6FakxN+wTf8PNMOJKWY:Ju0c++OCvkGs9FakxrTS3Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409285, "uuid": "b2048933-1f87-49c3-b6b0-31389f792975", "value": 1199616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409285, "uuid": "3b438002-d103-49c7-a8a3-afa8b78e4016", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de33d61a-c270-11eb-bbf1-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1741409824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "8a27ba06-1c57-4a79-8884-f3c4a93829e2", "comment": "Malware payload", "value": "c4829c82f5e7383bd9632b21e3a61f76", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "661f1ff4-5c46-4677-9f96-fdce82976723", "comment": "Malware payload", "value": "a3ad1bdfbd633fb54c06125112dda4ccbe79ba68a9b944f9462e9336d49dcdd8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "68dbdf77-b615-4669-8928-3f5f379b42c3", "value": "AAC32805D5508767C2D3237AE79F825D37325BA4A3DB33215A34BFB82BC27891E39921", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "6a59fd42-69fe-4484-920c-9287aecae841", "value": "3072:ekYPUfsgnsb0J2ag/VfvkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0vkDy+mTQOY5R3cn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409824, "uuid": "c17ddade-4408-4c25-a525-57c6f7f0bd77", "value": 121007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "e7c2ee1c-7b5b-4db9-a69b-fe327615457a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "f00d402c-4e37-41cb-8f70-2c137315bc98", "value": "b1213002a0faca282bf79920acbc43f106502a2373827f717f0ec6c44537002a979ddb", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01729366-c271-11eb-bbf1-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1741409824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "683c7964-1cff-4783-b68a-2ffd0531d273", "comment": "Malware payload", "value": "2ccd12d15ba431a7384cbf521b5e2957", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "6572e510-cef1-4957-aa70-f3c9d89dae31", "comment": "Malware payload", "value": "bb88620641d6f1b7c7cd87fb91486691c4a34dd873b3247e88d04378b5b10928", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "e4fb90cc-8fcb-492f-a6b7-67d0ebdd3ec5", "value": "FC935D27B552C6BBC08752B42BDFEA615833B4BC0B32720B33D47DA52B259D91E6DB01", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "75ab9cdc-a798-416e-951b-b4728539b68e", "value": "1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3ayPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKKifUm/KWOXFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409824, "uuid": "f4aa8b89-2125-421b-b789-55acf61b372b", "value": 94679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "7efa14cd-1c78-4ae1-abb8-a8f26c512037", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "dcb7c0ff-5125-4645-8e9f-c615f031553f", "value": "d211020260b689282bb259205cbc42f1165526233341be75bf0ec5c4993b002aa78e8b", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ced8f3b1-c270-11eb-bbf1-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1741409824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "6c86b681-50ef-4f4b-97c8-41df8430d0f6", "comment": "Malware payload", "value": "dc49eb74382d0dc4e7200592e35badc3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "df1f2d21-e283-44a0-b01d-b040d9f4db4b", "comment": "Malware payload", "value": "a6e85153b3abe1706e15d9fc174489a9a5acacecbbae01777ebd17881e79b288", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "c4367e8b-10a3-46cd-aeb8-c0130596b0f0", "value": "01833C02E743C6B3CC830BB2029BAA665931BDAA1E269F49F31D7DF45B128C47116F56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "2eaab0a8-3352-4c3f-b63d-e2ea8571bb97", "value": "1536:W35b9Vc4N3J6lreu5r4hWj8LZWDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Yt2oRmEwVOz+ucfW7k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409824, "uuid": "0be21525-5aa8-4588-b838-ace14678ba63", "value": 84999, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "6cbf6552-cc34-467d-bba3-f64fa46614a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "5ff74270-1d1f-483d-9ebf-357717430096", "value": "d211020260b689282bb259205cbc42f1165526233341be75bf0ec5c4993b002aa78e8b", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7b177ed-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741409824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "9c52b0c0-33a8-4d2a-9951-fb8e0394c8f2", "comment": "Malware payload (Mirai)", "value": "53cc8778d795d92d097b7e0d53d962f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "da86d360-667c-433d-988c-28d8ac6fcf34", "comment": "Malware payload (Mirai)", "value": "4f9ebb9fb8947a5f5aef266ddadf88e4eeaf95ef9f79deada1f18c7d8ecf27f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "92254d6d-f775-4121-b3de-d633bd4c4cb8", "value": "T166434B21B97A2E17C0D4B97A21F34728B1F6270E25B8C72DBD721E8EEF1960061536", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "682a0334-5bbe-4bb4-aaa0-0892d196efcc", "value": "1536:7ClUSCrPUd2eAYrRfSqUZeyHZ9VQ8T+TD:yhuMfZSrx9V6/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409824, "uuid": "edda5ec4-35c2-4d99-b2fd-9f2a2b9e804e", "value": 59520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "77471fbe-31c8-48a7-85dc-009c4cb5b27f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8666eb0-8658-11eb-825f-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1741409824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "816a88d1-3d1a-4a44-b338-7315f48cc0cd", "comment": "Malware payload", "value": "1fc658eaf31efaa2951a2335971092f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "b72c21e1-b140-4778-9313-374aeb6eabc5", "comment": "Malware payload", "value": "498d8ebd247e645e9a94b7890bbe0ab838bb662417871f09c6c4a92ee238259e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "c5a648e1-7089-4932-ad11-9b6c39485a94", "value": "EFA31A44F841872BC3D327BBE78E479D3B36569467DB33116A386EB42BC17C92E29520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "506207b5-527f-4048-8fc6-391da65d7f29", "value": "3072:VSx+i6mqaObhNWnPNKV+qKmZuqQ4DPwXXtse:y6mRObnWnP7qKmZuqQ4DPwXXtse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409824, "uuid": "a01a1ceb-dd05-4f43-b9f1-e384c8a63353", "value": 100871, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "7e7ed238-a961-44e9-b37d-4004ef756de0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "a7b212ea-ef96-42c1-83df-b0940288d54b", "value": "3611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dab5dec7-c270-11eb-bbf1-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1741409824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "8ec8d589-5f8e-44cd-a0a0-d4a85ab1b457", "comment": "Malware payload", "value": "a0bcf70ac488d99b012ab9b327642fa5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "2a78c262-7a5a-4aa4-bf71-2d97280db088", "comment": "Malware payload", "value": "9ed8278a6b84d953e686dac2a333183af5097e1ed9cc850ce7891c00892142b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "8c3446d2-99fb-4c4a-86a3-d3fa0ed1b47e", "value": "E1933A47B71C0B53C59B5AF12DAB3BF08B69B9E113D76185A10AEFD00372EB12412FA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "70110597-0a76-4816-a2b0-3c20262d391c", "value": "1536:QQK1n7bzX9jajzvxRq57wBRcGCMCZDxeBk+8gl4umXxVqDrstKfz9e:Q97vk51RcG7A+l4umXxVqDrIKfz9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409824, "uuid": "77a5564d-8a2a-4319-83ca-0035e118d0eb", "value": 93907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "4bd3c360-6f43-46d0-b8de-b8608ced0313", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "73a6e5cd-269b-48f4-acef-accbb421c3fe", "value": "7011d04270bac91d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8f", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebfed4f0-c270-11eb-bbf1-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1741409824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "fc70d717-1375-4722-82c9-743b875b8dcf", "comment": "Malware payload", "value": "41f6a0a8b013a3c6a6f4c411b979ebdd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "c698224f-9191-424e-8c29-55cd6a4a94f5", "comment": "Malware payload", "value": "5ac81edb0b7d50220c97cf9a7d63a88eff4958f6cd4b852eec45a686179ea718", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "cefe1617-8d65-47f0-8045-b934e758c0a6", "value": "A9A30896F800DFB7F40AE67604D34B24B670BBE14E532622731739A6AE762D53823F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "452dd2d7-cca7-4236-9e81-5cc333a3b2d1", "value": "3072:Vgdr2vIBAxMyAOLRcftBhOemuxVqDr78fz1e:Vgdr2vIRyAYcThOemuxVqDr78fz1e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409824, "uuid": "0270adfe-1f0b-451e-8ce9-58ad495e519a", "value": 98919, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "b10eb534-9914-4000-80cd-6a3064d7816b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "dc92b676-b07c-41b3-90ee-8da8ee0425e0", "value": "3611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00f619e8-c271-11eb-bbf1-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1741409824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "2ca88f07-f73e-4099-a000-dc8beef0d98e", "comment": "Malware payload", "value": "6523a83977a25d88b3f92fb4cb534148", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "5387c0f0-ec60-435f-a2d3-b63a637a8477", "comment": "Malware payload", "value": "f46184dc736fe775fd0aceb34c85b4d3e337d0fca2db59c9c3ebaf1826473191", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "84570135-68cf-419d-af2f-40bb48ca23a1", "value": "30C3842E7E12BFBEE668863107F35F70879521D227A19382F26CD6181E7128D1C5FB64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "0e4b05b6-365b-4bb5-ae86-33bc0fa5fa4d", "value": "1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe5EdWfRZrmW+IFj:Ted0W0MZQHNd6RZrmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409824, "uuid": "5b7d0a12-95bf-4e52-9adb-2bace2566759", "value": 125962, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "f0ae4d08-751b-4a52-9faa-7bfa1b9aa2d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "4d6b393b-f223-4323-9b3d-d86ce473cb98", "value": "fe11104270b6891c2bb259245cbc42b0165532232381be74bf0ec5c05937002ba79e8b", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dec7d48e-866f-11eb-825f-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1741409824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "02865bd1-b5ac-4d87-a164-9fdd033c700e", "comment": "Malware payload", "value": "e7d23f4b459d60109540b1fdf5fcbc33", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "71f8425a-0583-46ad-981b-207d97046638", "comment": "Malware payload", "value": "7d8d9a1dc738396d5a2eae133052a2f0e4dff2128878d8c4f333da7920bce499", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "c5305339-1957-41f4-8ca3-2ad535e8f1af", "value": "01F34905E6408B57C1E2277AE6CF824D33338B94A3EB33155938ABF43FC27995E26915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "8421f850-6bc0-48c9-aeb2-5a58c65d7204", "value": "3072:T1g2/eINNlzx2kkQCMOaQcvBcYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/iYnydM/9MmFwfBxE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409824, "uuid": "feb086d7-10db-496f-b53f-6efcb548c330", "value": 159888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "abd271f3-7426-4400-ba0c-af1b089ed57e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409824, "uuid": "8afa4755-be19-4a16-a875-ceec1c96db00", "value": "04210012a1fac6182bf799209c7c43f11655662362867f717f0ec5c44537042a979ddb", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2532de1f-8665-11eb-825f-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1741409825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409825, "uuid": "3843faa7-742e-4b93-a370-b49b5a92f5e5", "comment": "Malware payload", "value": "e6a23c9e8b83bfd73cbaa999b5a4fac0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409825, "uuid": "21cd9ed3-ee68-40e5-886a-0d919ebb5b44", "comment": "Malware payload", "value": "c847b5dda184f2322f8a3dae0f495c61c3f66d0938dab89107fefb73e6aa6202", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "6500b506-fd8d-4de1-a88b-abc2b570d9a5", "value": "7CB31845F8408727C3D327BAE78F479D3B36579467DB33116A38BEB42BC17892A29520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "334412af-9343-4003-867f-b7b22c4376a6", "value": "3072:MSY+46m1qOzssnFPPKNy+AmkZrQAhPDCXFke:06mgOzJnFPzmkZrQAhPDCXFke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409825, "uuid": "0369274c-599a-4b15-95b7-23f9dd211436", "value": 108417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "2ad6e226-5e1e-4abf-a836-eb0d4333413b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "fa6e8562-8f2c-49e9-9f25-220868079064", "value": "3611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6b77d34-c270-11eb-bbf1-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1741409825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409825, "uuid": "fd4bfc8a-7821-4da9-a3e3-792c0b749104", "comment": "Malware payload", "value": "e5b5b1b1f1a81c69445bce9deed31696", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409825, "uuid": "ff5cfa55-4c25-48b2-aac3-f55f0ba63b7c", "comment": "Malware payload", "value": "b99e4fbbd19159729e5c8375f84868f5484ff4bb8303d32f771641f488c20057", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "b3d53b68-a4e4-470e-9bdc-c53dbfb6e73e", "value": "BAC39517BB618FB7D81FDE33059A8902108DE58A12D96F6BB2B4C92CE74B94F08D3D54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "84339d4e-0bf5-4693-8dcf-aa8c8df676d0", "value": "1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epm+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EM+Dw8rmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409825, "uuid": "6f7c1bc3-0c07-4e15-92d4-5e8390c2ef12", "value": 126042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "9fa859cf-1686-4150-b0aa-7248c5ccaf06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "0ca69870-900e-4959-a522-62333ccacfe7", "value": "fe11104270b6891c2bb259245cbc42b0165532232381be74bf0ec5c05937002ba79e8b", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f2495cc-c271-11eb-bbf1-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1741409825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409825, "uuid": "e7fbeffa-c28e-4ec2-8ef8-da27ad27562b", "comment": "Malware payload", "value": "2c83e4090c03252157dc5846637f5317", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409825, "uuid": "3b25bad1-7d90-444b-ac11-8432976817fa", "comment": "Malware payload", "value": "f13ce45650aa219828fc0b8cdeb05f5c9086e41effc4fe43467895dff0f20666", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "dd3d27dc-d0f4-4f49-b38d-3f6eae0fa009", "value": "D3833B47E9A19FB7C0866A7565AB5E300B13E9912B4F1A4A303CA7F8434F4CD790EF64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "f97871a2-291a-45f6-8743-7ac8ca3bd2a0", "value": "1536:ClN9YyOXmMSr4k9dgGwKGg0CfjGJCMdojMyTRLmkxVqOEeofzee:g7OXmMSr4krG3JjBQLmkxVqODofzee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741409825, "uuid": "7b9b8dac-c030-40b5-924c-a30bbaaf2324", "value": 88733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "329c1113-fd93-4424-9bd8-e4a71fbc3144", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409825, "uuid": "5170d264-e22d-4596-b4c5-09d100318983", "value": "b511dc4270ba891d2bb299249cbc42b5265536236382be75bf0ec5c49537002ba79e8b", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5126cda3-fbdb-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741410484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410484, "uuid": "dd7cd367-e7d0-42fe-99df-1e4c4dd87091", "comment": "Malware payload", "value": "f7711c6558e4f8a59807c1f282b43af6", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410484, "uuid": "e60d8729-11d1-42df-98cf-30cecd11ec2e", "comment": "Malware payload", "value": "74d5fb4a1a1081dbd68277b520f6f21fa3b1ef8901279af16d8603711e1e81e8", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410484, "uuid": "20d6cfd4-0ee7-4d7c-8d0e-53d34585e0d5", "value": "T13CA0223288823C0C3E2023F3F2B8082C30E320C2AC2288C8C3E0F028C200332C2030", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410484, "uuid": "e636e772-2f34-4cf7-85d9-547b0159ef4e", "value": "3:N8tEd5G9NvtF5hLNKaH0+C2v:2uDGzVXhLNKM0HI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741410484, "uuid": "8c604b2f-5d0e-4c14-8edd-a8f292aa4036", "value": 80, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410484, "uuid": "c8a4a4ee-fff2-4fdd-b9ee-1625074cf6de", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "281c7fc2-fbdc-11ef-aa53-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1741410845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410845, "uuid": "b52d435b-e446-4404-87bf-db8c2621105e", "comment": "Malware payload (CredentialFlusher)", "value": "41ca8ccb816ba26d43e9c8460a203725", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410845, "uuid": "85d42357-8ddf-4edf-8ae4-2cdf1c6fd253", "comment": "Malware payload (CredentialFlusher)", "value": "617e5adcde78e21d1794d66d69c42f456e6ad544e792514ccc620f13d06d1ab1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410845, "uuid": "f773d1c6-3bc1-49b5-a7dc-0db7f76e7b9f", "value": "T12B259E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410845, "uuid": "78c05a76-3000-420d-bd26-274b2736e8e8", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410845, "uuid": "33af2fb1-c314-4bec-b709-59e15021649c", "value": "24576:gqDEvCTbMWu7rQYlBQcBiT6rprG8aCpjZQ:gTvC/MTQYxsWR7aCL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741410845, "uuid": "7f90eeb2-edea-4310-8631-686ce436854d", "value": 964608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410845, "uuid": "2d073239-2fc0-47df-97ae-cd24c404c42f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a282e4c-fbdc-11ef-aa53-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1741410849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410849, "uuid": "97f05fa3-2553-48f5-ba2e-c36e37ae1f49", "comment": "Malware payload (Stealc)", "value": "5472312af3988d99e54fee96cb865894", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410849, "uuid": "1c423d34-5163-42ec-9ad5-a76025a73033", "comment": "Malware payload (Stealc)", "value": "eec6632b7b34929de9bd3c96cad806143a6f7be906842b04b5bdd9fe6baf5f19", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410849, "uuid": "fdef4da0-a1e7-4c09-8b42-d2f03084582e", "value": "T1BD8533403EB08EB1D658F976CC9F432FF9A492051DBF976D4A8F4E1D4073622AC974", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410849, "uuid": "17c2f2ce-0b16-47b3-b981-43e5cfc6553d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410849, "uuid": "7939de7f-2957-4b4a-bf89-d803958c5cc3", "value": "24576:q5JcpTzMOnuzNBywOW/JPhG6wqqx1Cj8hlZ9q8OQZW26depWcPavY0klWeQ:q52pTzfuzKwOsP1q/CYXaQjlp4Q06WF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741410849, "uuid": "ccab629b-889f-4076-9840-7a91e31044b9", "value": 1815040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410849, "uuid": "567d1d1c-1603-4da4-a264-8ee0c821ff33", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "964ea5e8-fbdc-11ef-aa53-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1741411030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411030, "uuid": "5c5d2c76-f89c-4bda-9792-50c051f121b2", "comment": "Malware payload (Amadey)", "value": "b12177a780a7604ba4d4c56f3fe6da88", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411030, "uuid": "4a3d6870-7b5d-461b-a12b-d736115795c6", "comment": "Malware payload (Amadey)", "value": "31b4a511fcb8c62d7362c498cb0591a65f5f299ae9744c12e2b7bf31353d9958", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411030, "uuid": "0e08f26d-c0eb-40d1-8ea8-42165b91f096", "value": "T1D9159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411030, "uuid": "594deb33-a068-4d2d-b878-f8cd008d7f6a", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411030, "uuid": "f183f924-4354-4263-b195-3f850b819061", "value": "24576:jqDEvCTbMWu7rQYlBQcBiT6rprG8a0Gu:jTvC/MTQYxsWR7a0G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741411030, "uuid": "d4dbb3bf-7901-46bc-8122-392f8a56d184", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411030, "uuid": "6d5736b6-872b-4cf4-82de-164675c9e526", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c8aca3b-fbda-11ef-aa53-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1741411089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411089, "uuid": "a52dd5ad-3544-42b1-baad-d589937fc95f", "comment": "Malware payload (Stealc)", "value": "7cbad7c145712a2b69da50d492e8eb28", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411089, "uuid": "cab7e78b-7832-4174-8298-0751a961c7ca", "comment": "Malware payload (Stealc)", "value": "78a5bec4a7a8653f2ada9b6f9a695ea623e843521a83c2f8388af7ec10a50aba", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411089, "uuid": "d2b835ec-7166-411d-bd5d-cf198a855092", "value": "T18C463322D7ED4862F9A08B785DFB33C3053D7F444B6680AA95985ABD0D13A7DA5303", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411089, "uuid": "a92732c5-0966-4c00-9887-9abfccc0a66c", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411089, "uuid": "c9158401-de77-4797-a019-6becf0245c6e", "value": "98304:aYCDR1z2Lv9Or+DttY8sUmdZYGX2ZOqr2GsZilDzUPEn+REde5AJ/Ivp:aYE2L96MbY7cg8z1n4Ny", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741411089, "uuid": "21910f6b-f2dd-4298-86c8-77279883f6c5", "value": 5639680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411089, "uuid": "36fa6205-21a1-414b-9aff-207b94fe3d24", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8a97889-fbdc-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741411114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411114, "uuid": "0c82d49a-681b-4f2c-ab66-41de0135538d", "comment": "Malware payload", "value": "e4ce485f37033da3e04dedd4b3d2fd08", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411114, "uuid": "88dbedac-9f2a-4373-a526-340354359b8c", "comment": "Malware payload", "value": "31966639138446132dbd23f07e04fd401f8d9ca6ed5cb8f571c3c076d6dcb563", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411114, "uuid": "bfef31c4-b696-40ba-80c7-e28c70f30630", "value": "T180E54BE2A50972CBD48A27B8A863DF42D85D03B84B2105C3B86D647D7E73ECD15B7C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411114, "uuid": "196f028d-7fc5-4192-818d-543843c44b22", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411114, "uuid": "64ea3046-b6c7-4cac-8e65-f98c4247f8b2", "value": "49152:sKEEXgTzZS2eLPaJNyopNpRJeusz4uBmcvp2k/50JT2D:OEKzZS2eLPaJcIN3J5szNQsQk/a0D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741411114, "uuid": "d24021e0-097c-4e9d-9487-bd3142d64b74", "value": 3164160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411114, "uuid": "df58639b-7714-4d3d-9ef8-5b11ed020494", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "176e0184-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1741411305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411305, "uuid": "f51e6ad2-887a-4b01-867f-4dbd33e8e542", "comment": "Malware payload", "value": "356bf51b47509625d44a85cb30400349", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411305, "uuid": "9f67a848-1256-4b81-a7cb-acbeec429f9f", "comment": "Malware payload", "value": "83f1cc08c430107e70a2976aef153eb5e8f25fecc561f4a55d226158c080ace9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411305, "uuid": "38a2d4ba-7ed1-47b7-9f96-2c52f94fda6b", "value": "CA33024623A63AB6957188F1A7F8FF49F14A3DA89FF51C157C217A58A83236C28C4D1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411305, "uuid": "d53d2413-3e9c-424b-a876-8984789d2b61", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EfA:yYI0ARqw1qAEv7UIFM8oJorFquyA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741411305, "uuid": "b06ffbd8-a5a0-4b80-984d-5e2d5448b8fc", "value": 55024, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6175906-fbde-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741411942, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411942, "uuid": "80160f19-739e-41a1-aba0-91c5a007c9c1", "comment": "Malware payload", "value": "df4574c832b87b0ff73bc26c06160fb6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411942, "uuid": "a2c0c876-a7b9-4c67-bf7a-bf0e2af04c5b", "comment": "Malware payload", "value": "bc2d3d4107f3cf9d15e1b7a49ab3fd1b8f2f9d443b63a827cf68374028546df6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411942, "uuid": "f922f756-e963-477e-9bb4-f38e79221d6d", "value": "T17226338AAE3219F0D806AA71D9AF09E45FA62D2F547DD94EF3CBB15003D7B0707827", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411942, "uuid": "5a793a5b-de06-485e-9408-2d1154df53bb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411942, "uuid": "254973fd-262c-4aed-86dc-5d0b734138b1", "value": "98304:Cs/TQDLfpbIB81a6QR06gOaBCW+xAAr3PnOdE5wh9C6e1FjMqV:frQDL5C81a6/6gO6CpZrvqEeWN1iqV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741411942, "uuid": "3c577dfd-d77e-4653-b82a-7f3555d9a266", "value": 4708352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411942, "uuid": "f9406cc4-32ae-4988-94de-2f571b050bd7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bebd80dc-fbde-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741411957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411957, "uuid": "c7ec2e57-08a4-4b62-8f30-51736c8da0cf", "comment": "Malware payload", "value": "a9cee07081907d6abd6f187bd1cfd388", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411957, "uuid": "442d8ae9-2e9a-4343-a480-86f546383e6b", "comment": "Malware payload", "value": "c6e5b5bb4b3d84d4df5e6eddca5e643f7be503768ff97929018650d958178e5f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411957, "uuid": "a8618683-b0e0-468c-8406-62c2aef1f61f", "value": "T18806339AB933B17DC1892430EB8E05EE55C27E2F10A819DCB7E8F41855E772359A37", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411957, "uuid": "c6080bf6-bf16-48c4-85da-b577458137c4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411957, "uuid": "7d4ed2be-3252-40f1-94f9-834cbb8a4f47", "value": "98304:x1Jy1IOJv2KT3DYocg0tihdfbud3+cdWKNtx:A1IOJv2KTTYocgc6TBcQAt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741411957, "uuid": "6c7a83a1-f3ea-4321-86ac-76673aa418b7", "value": 3971584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411957, "uuid": "ab48e659-7727-401b-89d1-51a45bdd6608", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6f81a89-fbe0-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741412910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741412910, "uuid": "26cee6a6-ab17-4ebf-b1d9-96a179660513", "comment": "Malware payload", "value": "3f24ef71f32a6d84a25e2953f7dab943", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741412910, "uuid": "86d6fa20-b51c-4b30-b59a-74a159e63c5e", "comment": "Malware payload", "value": "aa1979aaf3a019580835a322380523b862c756ce0f2503ab9e0540d362f549df", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741412910, "uuid": "2f187f6a-9f8e-4810-8e91-a05b83456340", "value": "T186853356B7D6D978E56301F6709B011836B27850079CFAA477FD71FD08ABBB022A8B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741412910, "uuid": "d7dc4f3d-cb8f-4d9b-9119-53bfaa403b89", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741412910, "uuid": "11d01deb-d4e5-4993-82cd-d3764c0634f0", "value": "24576:cOj8bBb5QFV+GbQfkdoPLaU6B46dPjDC2hW7rc3gyF7P0x4EsnfZMxAydwZ6vXPg:d8bk1Qf2oXI75/3exmyl0Qphty", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741412910, "uuid": "70ff2080-bb6d-4567-84cd-b20535e8fab0", "value": 1865728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741412910, "uuid": "a2c86952-48ba-41f9-946d-efb819ad60b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22b9dc17-fbe2-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741413413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413413, "uuid": "e8e152c4-ff5d-46e7-9c85-690cedea0414", "comment": "Malware payload", "value": "037f02c0ab286c14eb4eeff4078f8d34", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413413, "uuid": "7a7fc0ea-11b7-4545-9cda-ce159346d33a", "comment": "Malware payload", "value": "58ca195c75b4653f8e239125242a9ed3d48987d0d8476581c631a4c15bd8256c", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413413, "uuid": "6677c2da-ebff-4622-908c-366ae3c99476", "value": "T14F469D56B2A400E8C8BBC07C864B9907E7F2B81953B4ABDF17B056690F17BD15E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413413, "uuid": "420cb420-b479-410d-b1cc-c140d80e9ee7", "value": "d7207811d21ee093b90604677d2f0be1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413413, "uuid": "201cc8fd-6523-47d3-9c1e-dae2fa67ea80", "value": "98304:5QFTtu4RnmauIFPZlk8Og9r+IfVIk7wVLuHLh7+5aR5uvlFsm2kDtG:Utu4ffVIzVLsJ+5aRIv92kDt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741413413, "uuid": "b788ca78-e81e-42a5-b3d2-40f276967fb2", "value": 5415424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413413, "uuid": "d7942185-bc54-4b3c-89ab-a7f234affe2c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6d2678f-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1741414145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414145, "uuid": "f0f3c50f-f0b3-490f-b8ad-818bea836e17", "comment": "Malware payload (Amadey)", "value": "8be39983e3d8c8f9f154791806781c3a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414145, "uuid": "bdf6957f-b150-4cde-bd53-9b72a72ae792", "comment": "Malware payload (Amadey)", "value": "b5efa8199f95373b218a0f1fba7595d4592f2aabbe29d69c0ba9cb0872a5ffa4", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741414145, "uuid": "d6bd47f9-e53b-4527-be9c-8a780fa0e8cd", "value": "T1E1463353FBEC6D11D870B73264F313D30B36BD4B2A69E6B41251D90949335B872E83", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741414145, "uuid": "32442a31-0eb9-4722-8b5a-088d6db9e84b", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741414145, "uuid": "8fe2a2ba-0a61-4ab7-8043-24c043449c9b", "value": "98304:0j+QDp1qeCYmlkYhd6sRXle2pshN4S55TUnucd0ECG6sbSVuw0Iu36bp9Svd0tlC:U+QDpIzRlpdLNWhOS5dthPkFIQd0tVm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741414145, "uuid": "4b6caa73-4a33-483d-8883-c5721220b6d6", "value": 5661184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741414145, "uuid": "361f42be-ad7d-4a83-8e0f-f55c6764b69b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09e88a85-fbe6-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741415089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741415089, "uuid": "be08ac82-62f3-4eeb-b521-b902605e98a9", "comment": "Malware payload", "value": "a8de283bc6aa92aa304f25800c8f5d4b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741415089, "uuid": "0cf78efa-8f80-442b-84c0-efcf97c240db", "comment": "Malware payload", "value": "d7973b0a237cdca8cdcc8343fba8f123e8a2f119bf5839ad6914d2629c627a78", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741415089, "uuid": "44eeaed9-6b0c-49ed-974e-5528bd4dfc9b", "value": "T1BFD54BA2E90972CFD48E2374452BCE829D5E03F94F1969C3A85CB57ABD63DC029B5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741415089, "uuid": "8b07f912-4735-4466-a431-00b1dc4133ff", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741415089, "uuid": "56d5b730-5078-4660-a601-8017f28b61df", "value": "49152:KdER4AF0eT0hgbJ+0Bmfd/izBZ7VOYwDMqq1KjksLPymsyjo:KdER4A6eT0CN+0BS9izn7VeVhjksLPy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741415089, "uuid": "9f02f63a-c549-48bb-a147-176fced9ff32", "value": 3006976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741415089, "uuid": "e5231fde-706b-48de-9a7f-360051ffbab8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b475f2df-fbea-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741417094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417094, "uuid": "9d872a20-cf41-4b4e-a5a9-c438aa63857a", "comment": "Malware payload", "value": "90a29bba066fb0ec2b14c31c185f1fa6", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417094, "uuid": "28be4b03-9c9e-4bae-bc15-4178ac0b9044", "comment": "Malware payload", "value": "e0f2a5cd2139d50b515cec4a1446ef4667017c6647dd8ffce3d6109131499fb3", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417094, "uuid": "effe29bb-1e39-41aa-9a56-75b1d57cb19c", "value": "T192272FE7317C230EDB82A4BDC2ABE964BD597BC70C6051877AA61D147E81435D3B3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417094, "uuid": "92cad06a-2f27-45ea-a27b-21b4358b4dca", "value": "98304:msmBVXSpAEiXkM485+q6eVbRDcWlG2OddsoOY2y7Cju54Xj4XJ0+wIvYPSJrzGRg:YLNG1owPvY19bVc0+rBG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741417094, "uuid": "cd300004-bb36-4dd0-95b3-14eaa668a218", "value": 20709296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417094, "uuid": "d3bc89c0-5735-4f50-899c-1427da32f715", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9823be0-fbeb-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741417585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417585, "uuid": "e021dda5-ba40-4667-a2a2-014e9c5af02e", "comment": "Malware payload", "value": "a981a16629c4343841042f48c22283ed", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417585, "uuid": "f4c04546-91e6-4499-8fdf-bc974fe94f15", "comment": "Malware payload", "value": "72e13c120a2f1c3483f2f23714b927c99cf2d9f26453b49fec347caa1039ff03", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417585, "uuid": "5d46a74a-0283-42e7-af56-6c5510444a97", "value": "T1A395330E7F17C15ECAB603B4BE6BCE97FC60A46E06FD46A106795200AD5FB6700938", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417585, "uuid": "d0a0034f-c687-4aca-bc47-9957174cea2e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417585, "uuid": "ac09eaad-0297-4b86-bae4-fb79f103241a", "value": "49152:It3CO+dQLiUtmRGGmDYm3DdHgeTdhBJkZ/2Oy:2CvdgiUcHm0m3DdxTvBJU2O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741417585, "uuid": "b99d2ab1-6528-4646-9baa-49a531dc926c", "value": 1907712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417585, "uuid": "21200a8e-e869-4868-852f-35f2816e8df2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3830c595-fbec-11ef-aa53-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1741417744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417744, "uuid": "2ea9f5ae-1b36-4d56-a782-e1276674c8d8", "comment": "Malware payload (Healer)", "value": "6bdd4d6fccc3b943e7a49a57262afcb8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417744, "uuid": "54c5534d-b333-467e-80a5-0ab578ce68fe", "comment": "Malware payload (Healer)", "value": "f9a23cc37dbe1bf39ff112cf0acab6f92c41b2613fb5b81d78971c8881e4ad40", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417744, "uuid": "d27aa55b-97b9-475c-b066-5b543b94bbc1", "value": "T1DDD54C92B50572CFD48E2774956BCD426A6D83FB47214CC39E2DB4BA7DA3CC121B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417744, "uuid": "505738eb-5dbe-4f6b-b39a-7d3c3586c4f4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417744, "uuid": "569dc424-e88a-4783-8c03-30c4128744c7", "value": "49152:9IbbsSMu8Zs+zpwg6GVyhwRIKQEuDKwhrTjZvxJ73Xzk:ObbCu8ZxzpwgnyhXKjuDKWnZ74", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741417744, "uuid": "8400929d-106f-4e71-ad93-41e37f382bfd", "value": 2747904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417744, "uuid": "170d9bf3-f442-4e62-baa4-976892fda7fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab67460c-fbec-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741417937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417937, "uuid": "ad234d62-8eb7-44c1-b5c8-ea13edd27a97", "comment": "Malware payload", "value": "9061cf23b168fbb349272dd8cd6d18e5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417937, "uuid": "e9333b88-5022-4f59-8b53-b928de34b98e", "comment": "Malware payload", "value": "b18f49fecbb0f46a7bce2a72bdb8725bbd1ea1263873c6f3d1c932563b0de933", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417937, "uuid": "41f82a32-01fc-421c-b4dc-a6d6e4274b86", "value": "T1D526335FEA33BE34E88175FDE2DE51D861A57DAF462843E85BC9CAB005E2312750EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417937, "uuid": "4e16d196-d0d7-48fe-9137-2cc063b922fb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417937, "uuid": "f232d3f0-1d40-4c61-a8bf-c4d83be5ffc1", "value": "98304:UQRFeFzIdxCDCoscytcr5La7sRdLhak3h4C48bt3Nj108Rb9nh:pRoFIHFcwkesRdLhaWh4ibfj1FRbP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741417937, "uuid": "4679d872-a96a-44be-9c72-d236e6430c22", "value": 4706816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417937, "uuid": "4a61e309-676e-4488-957a-fbc0ded8a081", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5d3f1f2-fbec-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741418062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418062, "uuid": "239e2804-bdd4-4da9-97f4-f4751052817a", "comment": "Malware payload", "value": "c45d4c61d1b8d4e1776128e077ed2623", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418062, "uuid": "3f096dc7-835f-4ae5-bd4c-ae731642df7f", "comment": "Malware payload", "value": "d5ce3948afceaad7872681113e138c686b38da6b913f3fe814838a70fa909a02", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418062, "uuid": "9be5fdf1-cca2-4a4d-a774-9f7de58be863", "value": "T124271EE7317C230EDB82A4BDC2ABE964BD597BC70C6051877AA61D147E81435D3B3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418062, "uuid": "9c7a3f90-adde-48c0-8151-732e296a398a", "value": "98304:0smBVXSpAEiXkM485+q6eVbRDcWlG2OddsoOY2y7Cju54Xj4XDF8rx8JfARhQLkL:KLNG1o1F8Jc09bJiC0ZQe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741418062, "uuid": "7fc53ef3-8808-4b93-9c8b-b969c1cd662b", "value": 20709296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418062, "uuid": "4f5cce84-0d19-48ca-bad8-46a743184f45", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30c08339-fbed-11ef-aa53-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1741418326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418326, "uuid": "04765592-f749-4fab-aa78-603e51700fcd", "comment": "Malware payload (Stealc)", "value": "340239570b10b90c155b34efe506a892", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418326, "uuid": "bd0e6074-b84c-4722-95a0-399344949ac4", "comment": "Malware payload (Stealc)", "value": "14d8c09b706afc3e5d4d8dedf727e093e199c92d25eac9a86326b50994908973", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418326, "uuid": "2c77bbb0-c307-4c76-a164-ec497c3d6d62", "value": "T1BE4633C35ACD4A31D5B90330E6BA11DB1939F8663639CDA66BDDAB061C75A3081333", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418326, "uuid": "80174794-58a7-40dc-8c9e-c9449fc7b556", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418326, "uuid": "07e132f4-729f-470b-8117-39978f8b9c23", "value": "98304:FeS2XqitKokc214Z4WLHJ7O0R1+RyxNEeGHqX5bu33G8kcCO:WqEwRWLHkNuNElXm8kz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741418326, "uuid": "75c8339b-7681-46e2-be22-8e3ccc39d621", "value": 5627904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418326, "uuid": "04883028-f1e2-48f8-87ba-ba88aad4ff82", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16e7d3ca-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1741418544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418544, "uuid": "e5227120-f33a-4a32-8d1b-fbc7bc3b08a0", "comment": "Malware payload", "value": "28e7fc8f2ed7f445e4c1afcf63c0da20", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418544, "uuid": "18e0c6b3-9ad9-4182-b4ea-74b802a03082", "comment": "Malware payload", "value": "8fb63ac77379ecdcb5e40f0f280bfa9779e0315de8dd4e78b48f34b85e634ccb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418544, "uuid": "22f02b1e-26f0-45b1-bda7-eb3b1854cee4", "value": "0E03024633953F33E56248F4D3FCAF86615ABD54EFDE142BA4013A65B07225D28CD81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418544, "uuid": "24e72fc0-2128-4afb-80f6-aeee0026f8cf", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04Y:yYI0ARqw1qAEW67UIWi7M8gz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741418544, "uuid": "9b77aa04-3659-4f63-bd37-d8dc33ccba47", "value": 39096, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1741418705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418705, "uuid": "d551f453-54d6-4756-970f-e3ed02d8bd49", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418705, "uuid": "f02fd58b-5149-4b97-965e-c3a8f2109a4c", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418705, "uuid": "a103b7a7-3eb8-436e-9445-d692cdfe3aa0", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418705, "uuid": "591b15ba-4306-473a-989a-ea0b5f53926f", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741418705, "uuid": "5e24383a-ae21-4503-8801-33698d6f51dc", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51d6f2e8-fbef-11ef-aa53-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1741419076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741419076, "uuid": "e5b09610-edca-49ca-ad0d-cb1b39284c0d", "comment": "Malware payload (CredentialFlusher)", "value": "223295d72b6feefebde2fb1cf8b53801", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741419076, "uuid": "1164e73c-1c4f-4f8e-b145-91016f175e62", "comment": "Malware payload (CredentialFlusher)", "value": "446f7e4806197104e7631b65cba4cc799d04afa07dc148a9757d9776e49ad9d0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741419076, "uuid": "73d858fb-1f1c-409e-92c3-3361a63967f5", "value": "T14C259E0273D1C062FF9B92334B5AF6515BBC69260123E61F13A81DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741419076, "uuid": "e4877f87-b6f3-4d6e-a97f-7b73faf35584", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741419076, "uuid": "160c7f91-26b6-4290-bf66-6ae4f71b1823", "value": "24576:OqDEvCTbMWu7rQYlBQcBiT6rprG8a8Q4:OTvC/MTQYxsWR7a8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741419076, "uuid": "fbd872f5-3c32-4b32-8b0c-f873143ec3d4", "value": 972800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741419076, "uuid": "261b60ed-2380-4d24-aec2-23608a2906e4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "161b646f-fbf2-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741420264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741420264, "uuid": "4db24628-45cf-4767-a2a5-5c37c033e06b", "comment": "Malware payload", "value": "2d49debdb4f26f6e83e487e84df08b38", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741420264, "uuid": "93fa338e-a694-419b-bb02-2cd020e969fe", "comment": "Malware payload", "value": "784ac50790d11ca9608113300d719d5f970f5d269270444ae4ca09587d6f47c5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741420264, "uuid": "b85e3a9c-f2f1-49c2-8f34-5beccbe2dd2c", "value": "T16124DF0DC073B1E9EB6DE0FC565857848EC0E3871054B681ABA7DED8F10A2959BBC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741420264, "uuid": "f2c88952-a756-479a-9d14-f4d10c5434c8", "value": "6144:1LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLq:iuMdOGHsaB8Mt3qq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741420264, "uuid": "5bae2990-e6d6-4551-892a-2c00e9e73528", "value": 213599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741420264, "uuid": "b06fe34b-d81d-4dea-befa-4b8c4dd71389", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c402e94-fbf2-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741420435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741420435, "uuid": "eb8fa76f-ff10-4bf9-b422-fe1442c52e29", "comment": "Malware payload", "value": "60515e6d26fdb836237b6089bab9251c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741420435, "uuid": "3a338e3f-2cf2-460a-a7df-b20efcd0b6ca", "comment": "Malware payload", "value": "5bd73648085f20a0a1c2d93b01eb1b0e583ceebde97739cd1ef3d90e4fb7d5d7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741420435, "uuid": "d9a71528-e207-48e0-ba1e-641dcb0951c8", "value": "T17595338E5F61B312D20C45B2EED391DEB87C2D322CF6463A7587A2B05D9B04F06AD7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741420435, "uuid": "e6359d9c-1bd0-4abf-a1a4-2c422959ad37", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741420435, "uuid": "1a936e95-2e06-45cf-b52a-92c1de7c37e5", "value": "49152:9JKDlS7v9VeK3YEU17Em4AxAMid6xfgtyp:/KDM7v9VeK3Y57KANnxY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741420435, "uuid": "e999a561-87bb-4d70-92cd-ee3dd62c9b8c", "value": 1935360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741420435, "uuid": "fa904676-2a97-4f1d-b3b7-f337542bf03f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168b15e8-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1741422290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422290, "uuid": "676a9f3a-240b-4e9c-827b-d6991f25be9f", "comment": "Malware payload", "value": "c73634570e4a70d7040fabcad0ea2773", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422290, "uuid": "ae8b2fab-5f3d-4a46-be28-83fc7b060358", "comment": "Malware payload", "value": "a7576c44f6f25dc87fcc803b0e463e385c13a048169536a7c7a5de804b0891ef", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741422290, "uuid": "12f3bc91-54d8-4aac-935a-0d9bd4358fd7", "value": "FA43124623662AB6857149F0A3FCFF8EE24A3E58CFF55C197C107A28A93136D2CC481C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741422290, "uuid": "194499e9-3d7a-4b9b-8d39-60fcd1f536d5", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyqe:yYI0ARqw1qAEv7UIFM8oJorFquyje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741422290, "uuid": "80af73df-48a8-4088-b2bd-7d1cde1fa8a6", "value": 57920, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "550f4ae1-fbf8-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741422946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422946, "uuid": "660ab81e-c095-4583-a25a-84f0009d7802", "comment": "Malware payload", "value": "6dbe5cb4b6b89eb52bf4b2a9500684e4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422946, "uuid": "be102255-9c0c-43ba-a268-a939175e72af", "comment": "Malware payload", "value": "ab33c0695799cf39772a6b72102d1dfcd16d3c83ebb6905d72b0542654185b35", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741422946, "uuid": "2626e191-f05e-41ff-9c5c-052459bd0ff0", "value": "T12C06332AB87B563AC84FB836FB4D91DA02295D6F2D90CFCCBF01E14919E378561267", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741422946, "uuid": "d433afec-f0d8-4241-a7b7-daef3af19aac", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741422946, "uuid": "c0fd18f3-0692-46d5-ae4d-d31ff24833ea", "value": "98304:syT5+1dmYuUlS/ZA7/fQIn/PAR+yjA3D6FLJ:syKdmYuUlgZyXz3AIykT6F9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741422946, "uuid": "dce94e4c-387e-4b5f-b9a2-2913f47f5815", "value": 3986432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741422946, "uuid": "942a6ddd-23ac-4b29-a5f3-8eaa776cab93", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e91a2595-fbf8-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741423195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423195, "uuid": "15c520ac-2a6e-4fa1-98b5-d9f65a2c7a24", "comment": "Malware payload", "value": "6c81b3f2c60267ae994e0f185fc744ba", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423195, "uuid": "9bd15f81-a5b2-4293-96cd-bc7d84b6af3c", "comment": "Malware payload", "value": "e52d43fb5ddc29ae8b843f40e8fa8eab605f8368f6ed9994e5cdcf3c0e2672d2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423195, "uuid": "390fd34b-bd1c-47e3-aa86-98f7cf244a70", "value": "T1C2B5BF82A3D242B2FD876537112A67135735AB09431BE9CFA6D03D70AC312F356BE2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423195, "uuid": "1d3e4e65-91ed-46cf-b6f5-eba56b0d252d", "value": "3733a9b8ddfdf27808c4ddebb24a588d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423195, "uuid": "aa884ad7-3d11-4a6c-b9ad-7e26af05157a", "value": "49152:pTgH6Zy5prEJtdDLe86vFsA+3YTQFk0S0eQYBaM6Pkerlr:pTgaZPk0zeZShr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741423195, "uuid": "128c91c0-88df-4fff-aaf6-45b156b8ef82", "value": 2282496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423195, "uuid": "a21bee14-de15-450f-995f-64af6c288bf5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c08ae2e7-fbf9-11ef-aa53-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1741423556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423556, "uuid": "2db2ef71-78eb-4fc6-a1c4-11c13e97c112", "comment": "Malware payload (Socks5Systemz)", "value": "5aec72bf700a9c7d357c2901b52d0b14", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423556, "uuid": "b4506ef4-b0a4-4ad1-a395-8961449363d7", "comment": "Malware payload (Socks5Systemz)", "value": "859579e2ebc3c59829776836d4c1cb1c32eec5f8fa82c122f2a8156a67d24de1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423556, "uuid": "add8b7a7-2143-45bf-9d1b-016940a1b2c1", "value": "T18A063353D6FC70F4F94299B6295B652892333E10A131688B7A5C5C1CFB21583E62F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423556, "uuid": "71d36f7b-8584-4eac-9eec-7c9e9832cf17", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423556, "uuid": "1a1ce7fd-a7d2-4450-ae5c-41497e906139", "value": "98304:34fuFrfWjVG/Qe0KOBlCyzFl2lJEZ1fQmRll27kOz2Mo14iU:ofuxfWjY/Mn2yGlJW1fQmRlY2oh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741423556, "uuid": "cdda4bab-5cd5-4742-9b99-c7b3cb38bf0f", "value": 3937354, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423556, "uuid": "42629d9a-498e-48d9-9c1a-6d3b09740de4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f317550a-fbfa-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741424071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424071, "uuid": "8125a1bf-73bc-42a2-b6fc-93d4e8a6e3e7", "comment": "Malware payload", "value": "4ac25e77c048dd7e1b4fabd33c721627", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424071, "uuid": "c83cc8e8-280c-4461-8455-33b6224881c1", "comment": "Malware payload", "value": "ff338ff4d775c30b35f2766c3f57f6e12621a7793633189f650c0d803b23f605", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424071, "uuid": "26e4566d-73df-4d78-90d5-15f8e6331c59", "value": "T1E326339FAB7B2E39D142B272E72C41DAB2EEEE1F156182EDA71820F05077B5953073", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424071, "uuid": "7b519569-25ed-49e9-a787-0e60c7bdbe7e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424071, "uuid": "9717e138-721b-46ce-af32-d377a0a7e801", "value": "98304:v7OcCKRV7iWDlYwws2kuCT8UUHLXmBayfspraBAJ27K1zG1EK/lc:vacdOTC2kuu8tr20yYaBAyQzCt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741424071, "uuid": "0d22d70c-b7ad-4f58-88f9-cb809f802368", "value": 4720640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424071, "uuid": "10112c5c-3acb-4e1f-aa86-9dd42830fc27", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9530d654-fbfb-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741424343, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424343, "uuid": "9c2d5fdd-3c52-419e-829c-85a1b6637abd", "comment": "Malware payload", "value": "2ca58a9ee5b348e425565fb1b830af0a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424343, "uuid": "0613550e-dc8a-4d0e-84d7-3d9174408406", "comment": "Malware payload", "value": "fb60f6ccf65de5db6df534fe80c47561693d3dc17348509970d3697b2124da1e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424343, "uuid": "81b43dfd-408d-4e55-89b7-8fe64cbb9388", "value": "T105E54BA2B949B6CFD4CA27785427CEC7585C07BA472489C39C5DB8BA6E63CC111B7C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424343, "uuid": "e0d9eaa0-3a04-48cf-93d7-5ad68775e908", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424343, "uuid": "6bf30c33-a77f-44fa-b319-1dbfa07ffa50", "value": "24576:HjtXwxCLD9PcJQbnfz4YFezpr7EPfU7HirbMcTv9IieLUsDDOLIJId/WWjrz9q1+:Dm4ltfzXFE8uHobPV79z+KrKibvGM/h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741424343, "uuid": "4cd4a1a6-341e-4480-b04d-a49dcf434ad2", "value": 3053568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424343, "uuid": "53b92fd0-9697-4105-b4ca-d53e05cddd08", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5960f165-fbfd-11ef-aa53-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1741425101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425101, "uuid": "d416cd99-e439-454f-a4cf-c7a939f72f55", "comment": "Malware payload (Stealc)", "value": "1bfef595b53467b6c7077bd942de56e4", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425101, "uuid": "1aed3a1e-25a0-464b-9b06-b1b72a53f615", "comment": "Malware payload (Stealc)", "value": "630438e300c269ac65ff716de619b76fd7f0b5a8239f90a9cb98bb5331e044a0", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425101, "uuid": "4d1dbd3f-1559-4d22-a1fa-0b45f5274da4", "value": "T1E8463357DAD80623E8B0A3701CE606DB1B39BF19291A921F4147CEAC3D7159CE635B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425101, "uuid": "01ec3a94-6589-4d28-88d2-ae3ce1d6e115", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425101, "uuid": "d9b71ccf-0127-4ece-a090-1405c2a62702", "value": "98304:rUqlSQczrYa3cJPStiFuRd49JmICuVAiLqm+50Tz/2n4OjecEVYkrrZ:rUmZSr31tiUUPKBm+50/2n4GOYkr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741425101, "uuid": "26d74ea4-f076-413f-a8b9-c6680fd4547b", "value": 5662720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425101, "uuid": "11d6e4d7-5816-4efe-9ca2-59ec923b5807", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1eb1daf-fbfd-11ef-aa53-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1741425250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425250, "uuid": "a5debaa5-a5c2-4012-bf24-398c33cf9baf", "comment": "Malware payload (Healer)", "value": "8a679f78adf8bd0553bf356b6d5d3f82", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425250, "uuid": "71ad0bfd-f278-4b29-909f-6d08ed7c9809", "comment": "Malware payload (Healer)", "value": "86e52914b936aaf3ffa7bfdb2822ddb834ae25a05e4b5ffe3708878ffc1218a8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425250, "uuid": "f5b034f4-6ea7-4323-b195-d1f20666f063", "value": "T1CDD51992B50972CFD48A177C9427CD425D6D43B94B2148E3EC6CB8BE7DA3CC916B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425250, "uuid": "81031df1-0375-4085-8e12-ce4cf50bfce9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425250, "uuid": "2b6c73da-0d8b-494d-bbf0-6f98df5b89b9", "value": "24576:dNaioI/NvALW898/LuGpK/PrY1mNwh5bLbQg96MRcgsFYDahVa1Kwl3TX41pfybD:vIu+l8jLCrYIVTPsldqMiQbJq7Wx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741425250, "uuid": "e6ddb26b-0f62-4b1e-ad3d-3765d553cf1c", "value": 2936832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425250, "uuid": "231abf82-f97b-488f-9831-6914c886e448", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31ca5618-fbfe-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741425464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425464, "uuid": "dd1b783c-f1cb-419f-a647-2635c0b741b6", "comment": "Malware payload", "value": "1225e142c65a9d7f06561b8bcadc86fb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425464, "uuid": "f9a41f36-84f1-42c4-bf26-23b843eaeddb", "comment": "Malware payload", "value": "248cc086e377e5dafa6b956916a0fe11edda8e539dcf631aeb615ea54e046ede", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425464, "uuid": "f8bfd8ac-0476-4d00-8284-195d0dea356f", "value": "T186B5BE42A7C640B2FC866937112A67078739970D431BE5DFA6D03D70AC352F36ABE2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425464, "uuid": "96d2eb8c-50b5-460f-93a2-657d268ddc52", "value": "3733a9b8ddfdf27808c4ddebb24a588d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425464, "uuid": "7d6c77a5-cf56-4248-856b-884d9cf6179a", "value": "49152:kidfHq5CZZ7Up99TbuMqPLeVQ/9U/mfMk/eHvBlujJPk1rlF:kidfK5zSxMSePXu6hF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741425464, "uuid": "a9dc5b47-4c78-4384-b5ec-d722ef780412", "value": 2275840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425464, "uuid": "48eb5986-1e10-4917-a970-e2847f4aa740", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fa45dfd-fbff-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741425998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425998, "uuid": "b320bd6c-99ea-49ad-b610-bf2a82c6c241", "comment": "Malware payload", "value": "7fd27c3a11e853d54b0bba494452f78b", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425998, "uuid": "71bfd109-a00e-46f3-bd1a-b351b16403d4", "comment": "Malware payload", "value": "0e3620cb6fdd9587150588c6e6a0483e6ccabc001bfc5b0e5d945eb2acc8aaa9", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425998, "uuid": "d0d90d8e-f408-4b65-ab01-fa39249882e4", "value": "T17EE55B62BD2471CBD4DA9FB4552BCD4678ED03B90B3808C3DA28647A6D63CC251B7F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425998, "uuid": "91d31437-346a-4f37-a3a9-874d0c5006ad", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425998, "uuid": "b889a098-0245-4b67-906e-68abea8c4e9c", "value": "49152:jkIcq4EgZ+R8MG/ErYe5FYVGQaqk1IFVD0uf0y3:AITPC+vGAYO5xT14Djb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741425998, "uuid": "302d832e-ce7a-4c19-b9df-814e9c77d123", "value": 3173376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425998, "uuid": "aa9886dd-cc94-4c06-bc0f-7a117e0603cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19258105-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1741428026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741428026, "uuid": "da0ed07c-9411-4c82-a8cd-02e41cacd4c5", "comment": "Malware payload", "value": "f860c4318ab1cfd43fafd24f99c176cb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741428026, "uuid": "9f058e55-a5ab-4742-b740-cfc25d688717", "comment": "Malware payload", "value": "d8430372204682e98e75cdf589ab45e2f09960cd0aff5af741341671481b3656", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741428026, "uuid": "aff71782-3d63-4637-82a5-93ac6e911c3d", "value": "5972E18A2EAC3B07F4B296F2F33C7E58F3052E9D76679817D199712350A301AA114C6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741428026, "uuid": "e4340eb4-c7d1-413c-90bf-f8e63bcc9152", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcn:YTYIDfYG6ZmewZ59+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741428026, "uuid": "558b281a-2276-4339-b700-2c34ea5516d9", "value": 17376, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2cbc6bd-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429143, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429143, "uuid": "ca3dd686-0295-416f-967e-6ecb17e79581", "comment": "Malware payload (Mirai)", "value": "8a2a6c948d201883b09f9c5bbedaca00", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429143, "uuid": "0d30348e-84b6-4883-9857-728409664406", "comment": "Malware payload (Mirai)", "value": "0c9fc61ecbc6d21e9780d71dd156614b54c01e0fa6e120f8f46b810bba18450a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429143, "uuid": "23125122-62a0-408a-9fa2-93c11e8aec14", "value": "T1CA51B2D402F30E38ADFF992E71AA881471B5D4E739C69F54D9D83BA964CEE042C40A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429143, "uuid": "a2a62098-a0e7-48ed-a71f-f8281c40e3fc", "value": "48:vaEe9bDgFahcJFLhmvy3daoOcqPgH22N+fG+EYWw:vaEe9bqGmNmvy38oOcqPgW2N+fG+EYWw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429143, "uuid": "c11963df-31f5-4620-93fe-ba49a82b0dcf", "value": 2475, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429143, "uuid": "8e4eef7c-62f8-495e-81f1-1f2681a7b6a2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7a22cb9-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741429205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429205, "uuid": "95e11269-c184-4f81-9174-0650ae722e7c", "comment": "Malware payload", "value": "e91e723a80ebde37f00c16510536a37c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429205, "uuid": "fe1dcc30-bd6a-4dc1-87ba-e85ebb8fa061", "comment": "Malware payload", "value": "2d360ef1fa8a76b990cc159986482244c16e33731136687bc441fe70b76ba92f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429205, "uuid": "25b91496-17be-4f69-ad9a-14f51796c2cc", "value": "T14D518E8403F20C38ADFB992E71A9881472B5D5F77CC69F54DDD876AD64AFF082C40A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429205, "uuid": "40069ae4-58de-426b-84b6-ca4c543ce460", "value": "48:viEW9bsBFahNCFLhqvK3GloCcCPWH2qNMfG+iYkw:viEW9bmGSNqvK3moCcCPWWqNMfG+iYkw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429205, "uuid": "b2caeb26-b80e-4f01-aebc-c09f5ca980d6", "value": 2625, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429205, "uuid": "c487c7c2-a077-4b03-8524-fc442bbe07d6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7b6c0a8-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429205, "uuid": "74cfb910-c811-427a-acee-4e2a3ad0b557", "comment": "Malware payload (Mirai)", "value": "7765ad7cb390bb071825bcb1228eee26", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429205, "uuid": "e248d5e1-1714-494c-8245-bb85a069f98b", "comment": "Malware payload (Mirai)", "value": "92c7bf6b5428398ba329fa23e73c10f3e68cca53879290285bebda768a5fc4d5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429205, "uuid": "234baeab-bc6c-452b-9f16-1784eda47cc4", "value": "T196B35BB3DC26AF98C655D074B0B08FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429205, "uuid": "745bd2e9-fbd2-481d-bc6e-bc5bfab43fb7", "value": "1536:WTW/VCxsHZusj2Li62C8vqKTR5/PPVGAto2WszrW+TNe7p:WytCxsjx62NFT7VG92Wcrbw9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429205, "uuid": "5c48072c-f761-4258-984b-8ebee83c533c", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429205, "uuid": "4329f4d3-7670-4672-8cf0-3f4deeff04cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7c81b32-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "b2307bcf-ccb8-4ded-8bb8-094de5c700b7", "comment": "Malware payload (Mirai)", "value": "3d2b4205a3b9b49c71d09686431d5d4e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "444eed3c-0575-4a65-9feb-a0a91e38d15e", "comment": "Malware payload (Mirai)", "value": "6a3212199bcd4844abe8523d90007077c74311983d1bd1b523cf0d66a2a02593", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "4adb34f5-fe04-4b63-8ff5-0d140ec7c4f3", "value": "T1A9E30A46F8814B12D5D111BAFE1E128E37131BB8E2DE73029D246F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "d2a7a4f0-8b77-4909-a2ec-126a9a6215f6", "value": "3072:aTe9DGwUMhyTxXMbSrjWa223+t+T8PSpLi:ueBGw3wxXGSrCanP8PSpLi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429206, "uuid": "7a4dce1f-f82f-4108-9ff6-71bf03324cb3", "value": 144124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "f272398e-7a3a-4beb-9d80-3f9443c31fb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7e91740-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "e8985fb9-0ffd-4ccc-8dcc-1b78e4464221", "comment": "Malware payload (Mirai)", "value": "308702394c207b5cfb5c5358a5ae4d5c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "4c835c0e-3c5c-466d-a4a1-53d12edeb3aa", "comment": "Malware payload (Mirai)", "value": "7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "d2d0b87c-76e6-4e9b-833f-8df9233d64b1", "value": "T18004C719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "6c34a0af-e9f8-4b65-b31c-08ca5b59040f", "value": "3072:nKpzGZeNkSfcQqmav8SqaRVlnYz6521t:nKYZeNYQqmeqavlg652", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429206, "uuid": "3efbfaa6-5089-4183-a3c0-c5cbd90a7ac9", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "6be6bef3-a405-4109-8426-22ad6e6bcf7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7f19152-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "28da4a41-e8b2-4473-bf5c-f2509d97f6d7", "comment": "Malware payload (Mirai)", "value": "8b6a1744eda479cbde85fc53f5c4d5fc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "d644abd3-6e53-499c-97ee-f36d204c4d1c", "comment": "Malware payload (Mirai)", "value": "2f47aa55b0271df7e9f40c431a6f090af3cb47df7a96191fe9e355b5c4fb23eb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "3f3c2cd7-edb5-4c6b-96e2-7b1debe8e546", "value": "T17A937CC0F683C4F6E84305B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "dbcef40f-943c-4b20-a590-0f24a43a036a", "value": "1536:W/QCZaxGdvts3i5JPholIxPu++ALtgUIKqI4FrS4LSj:WYCZa8dvm3oJPhAIxP5htSKfUmDj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429206, "uuid": "2b519b4d-d85e-4c25-96b4-b62c5e1c445d", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "576fe51c-ddef-4bc6-ac9d-958c38c78f47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7f8d196-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "91493a79-3d9d-4efe-a59b-227b2ddf20c5", "comment": "Malware payload (Mirai)", "value": "430d5ce27098f7a1b678e00b8babed16", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "b2f692db-fcd2-4913-b3fe-01792d86e7a7", "comment": "Malware payload (Mirai)", "value": "57c62930fd2745c9bd63722cbd438278d5c1e4f3612ffae871c80a798bf734c8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "1ff19059-7a6f-460b-a167-8fe4792bbf4c", "value": "T1D0D30945F8505B23C6C612BBFB5E428D3B2A17E9D3EF720399216F20378695B0E379", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "39ad5b92-ab53-45d6-8991-341c706c9612", "value": "1536:kKdnEPmm8uKrRZWjp7F8PAZYg4V9z6mTQfoAO0fF5wpr8VBipAFly+wywnRl2JIX:kKtV8Nh8P24PvsoAOwFMo+pC6+K9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429206, "uuid": "f05da32a-46c3-4d78-97b2-56f197004594", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "cb5dfcea-3e76-406c-85aa-b11d5d84829e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e82a38d3-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "2610ba3e-7178-43be-9c87-bdf3f911c2db", "comment": "Malware payload (Mirai)", "value": "41aa6b950403c0b60a25a7fb5d55510d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "331ed23c-0281-4aed-90e3-644eed91fe14", "comment": "Malware payload (Mirai)", "value": "2cdd44752af0c13270d77ed701b5f7e28b8b9bc7a391b815e7d34bdec556624a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "6e1b7572-6315-4238-8f5d-040bda1d40b5", "value": "T1FF04881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "2151cb81-559d-4886-b002-1515c8937eb3", "value": "3072:jg57Rq7LHZwbq1YSBan1yvbysxr1uGSAY:jglRq7LHZ0Bqyy1BSAY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429206, "uuid": "c8af974f-e867-44be-a2ff-0c5b91e1842e", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "6b0334aa-0cfb-4550-bd87-6d44f6191766", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e83a2a48-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "927a4d28-ee16-445e-af9a-2faf028116d1", "comment": "Malware payload (Mirai)", "value": "4acbb4ee28b18300e3b0c9a3d4cd9f69", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "153af5a4-a066-4dfa-84c1-f651f3bcd5e3", "comment": "Malware payload (Mirai)", "value": "47961a8bfde3ff7c4baa1b3f4424aa76b4d58eda0f2603924ba45a321a6c5bb9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "ea4ddcf7-3836-417d-9d5c-99485a274f45", "value": "T120D33A06730C0A47D2632EB03A3F67D193AFDAC121E4FA41355F9B8A95B1E325586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "92394344-6633-4dbc-8c01-fb2dbc922691", "value": "1536:xnlQp4Goyx6BxIBUiuxfytKte4c/tzabw0M7lrkJvAhhDrp+p3jqkXD7AO:ouHKUiuxhtyuwh7l7hGkO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429206, "uuid": "42b63ef8-74dd-450a-86f2-cf8bacdd0efe", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "c9aefb0a-5451-477a-854d-15fe0a4ea179", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8440781-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "b5b6e620-d184-4657-be60-e55211bcb030", "comment": "Malware payload (Mirai)", "value": "49297a8a71dc10d1be9260f076f6be8e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "d5020c9c-7bd7-4a0a-bb79-b9dce1fa6ea1", "comment": "Malware payload (Mirai)", "value": "8dd0239b7673b610f9e8469f6134d9ecf285826921afbdf86924dab6b68773c6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "21406957-dcd1-40d6-9db4-0f7c9402b365", "value": "T17FD35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "d6c414f6-2d4a-410f-a9a7-525a4e283f5c", "value": "3072:79eSuygEPjt6qkWqwdKmDnYMb0gBd/gQyVGsdqml6oaj:79eSuygEPjt6qkWqHeH2laoa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429206, "uuid": "b3614b5b-2c87-4891-851c-764179d017b9", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "8f6dab98-e27c-4e11-a7c2-35858d9feed7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e849a0b4-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "8bfc2f66-e6e0-4301-b5c1-3b7d32fda7ac", "comment": "Malware payload (Mirai)", "value": "0c178203ddde161cd0a9578d1dc8696a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "5332648d-a131-4ab3-8976-3a074f41bf68", "comment": "Malware payload (Mirai)", "value": "ff0811a41e0c7594c355f33c54c1cde1e544eb7ec81b8033fa5da9a628aeb448", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "51c90232-1fdf-46fd-9867-36b21ab1462a", "value": "T1BEC31B45FC404B23C6D612BBFB5E428D3B2A17D9D3EE720399255F60378686B0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "ddc548ff-3b52-4f42-9d92-14710bcbb8e7", "value": "1536:pnK20FG5NCjNoCDMQkYOqcW2AcRX4VRo6TDjJtCyMLYRCCaXYv4BPQlnKwywDROH:BK23kPRPOfW2R446rJtCZLYpQYAHb9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429206, "uuid": "9a0b2219-552e-4810-89a9-674980dd4c3f", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429206, "uuid": "097553d3-f8fe-49fa-b753-5e92aed5f350", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e877cec8-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429207, "uuid": "b01f874e-555c-4a88-bac3-2ba223b6c603", "comment": "Malware payload (Mirai)", "value": "161b6afe1a25feb4f81f87e5b942107d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429207, "uuid": "59b7b92a-5117-4041-b3c5-e9899a298110", "comment": "Malware payload (Mirai)", "value": "592ba920d31c5214330403eb03344a270096e3a650771b240ec757859da40ecc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429207, "uuid": "1fe6b298-bd37-4464-abeb-8562c8933105", "value": "T1DB042945EA404B13C4D627B9F6DF42453333AB9493EB73069528AFB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429207, "uuid": "e908b850-0ca0-46fa-8170-a1182bbd7e47", "value": "3072:8Le6vh5G1QIruCee+asuTuRebU7IVILzZQe38YhTfYo+M/RzApthLn:0e6vfRIr1r+asuTuReAvLz/38+x+M/R+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429207, "uuid": "9f02c7cf-9d31-4b83-8bf6-f71a5aa31a8a", "value": 181474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429207, "uuid": "707b34bb-94e2-405e-9cc0-ba5690df13e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9079254-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1741429208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429208, "uuid": "e11b68b4-feee-4c65-b152-0f07ceb7fb72", "comment": "Malware payload (Mirai)", "value": "a46f5559852ec251c588c87de5f39e7d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429208, "uuid": "cebd1fe5-806d-462b-ab7e-7690da4b4d57", "comment": "Malware payload (Mirai)", "value": "0df5fc4a3500394d31a12be7ce85a7ca8993dc10845b83695c8292eeabbfbaa3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429208, "uuid": "76cf4920-bae0-41b1-9d4f-e22bfc41404a", "value": "T1B7E329C7F800DEFAF80AE33748570905B630BBE115921B372257797BED3A1991963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429208, "uuid": "c8099029-2c96-431d-8745-523f390c6503", "value": "3072:qmzTDH86JK78FO7xtjA7s2idk6w9YwVvjbiXL+noy+WYPr:q2TDH86JO3jA7sHda9YPLry+pPr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429208, "uuid": "8e569a4b-d319-418f-aa81-2ec7377a7e77", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429208, "uuid": "802cfbd7-6942-4d13-9716-7a08db695377", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7980ed19-16e1-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1741429385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429385, "uuid": "ab47828e-83e1-4e41-99f5-1f8b1fe8a2e1", "comment": "Malware payload (CoinMiner)", "value": "44de739950eb4a8a3552b4e1987e8ec2", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429385, "uuid": "e9dbad6c-b73b-4c00-a743-5c3183ba9582", "comment": "Malware payload (CoinMiner)", "value": "9b81bad2111312e669697b69b9f121a1f9519da61cd5d37689e38381c1ffad28", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429385, "uuid": "77baffb1-2671-4869-a83e-c4ee2f56ea30", "value": "T1DD8533E761E734FAD47426F05EEDD1D3F69E38988E0C550D84A8C828CDA5B15D32A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429385, "uuid": "6427f217-5dd5-44a5-9ad6-b52303b49113", "value": "49152:njEflQ/573nydbeONLwFCRTrgcSzNpZWPU6B:jEflQRTydb/ZwGrwzNpCB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741429385, "uuid": "c1d505a7-3595-4530-8cf4-908710f926af", "value": 1827416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429385, "uuid": "502176c2-e5db-400c-9373-b3cb8b3f3399", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429385, "uuid": "54449e63-490f-4c06-98c2-405b816809a7", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db9ed678-fc08-11ef-aa53-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1741430044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430044, "uuid": "dee76dc2-50e9-4fe7-8313-3693afeb8be1", "comment": "Malware payload (CoinMiner)", "value": "df39997c92ecbb40234b4d54a9964db3", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430044, "uuid": "55823df2-9461-4692-b726-6dabc599af15", "comment": "Malware payload (CoinMiner)", "value": "cfebc5893d357c3ade6a946a3e826be23ba3c86a679df4c2a3799f5a6715bc06", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430044, "uuid": "1b44c3dd-3d11-4110-81df-c382385de1c5", "value": "T12AC2E09246208F32C05FD2B75AA537E790DB3DD40F217ADE7DA1862F9BC915325C28", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430044, "uuid": "10ae3a0b-18ba-41b4-ad05-1f1207fecb50", "value": "384:yF2/GatwrPCHPnQKIfMzg8nTRgEP8aoFPaS66QKH+lp703TC3HaHPtc+fmk3ecNZ:yI/o7CfQeTRgF7FPafX0g+32MwoZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741430044, "uuid": "b0ce0999-1309-4899-aa24-a761a0f6445e", "value": 27356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430044, "uuid": "8f6b4e85-6cf2-47a3-97e4-a47e412a220b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df116e81-f208-11ef-96a7-82aee05be84a", "comment": "Malware payload", "timestamp": 1741430106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "1384e774-9a1c-4cdf-8169-2182aa5d1a09", "comment": "Malware payload", "value": "281ea0f354032b3c66284a60f96cb414", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "fe01d510-0e2a-4c93-8487-3f47719153ca", "comment": "Malware payload", "value": "b26afb82aa30b9866223c8406268266f2997a5cf76d7d9bfc6048c377ecaee15", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430106, "uuid": "8818429f-82da-4ab4-8e2e-e3c00c7dd5b7", "value": "T13641B48D537E4F7078D4BF612AF9C44C58C9804E1CD47744B1A638E46BA4A1B32DCF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430106, "uuid": "580a9f27-da30-4965-89b6-8d7510db67af", "value": "48:2eLB8yYVzavPVTavuVzavtVzavjVTavPgVTavXVTavFqVTav3VzavIJWUVzav7/Z:heyIVeMXvgDwQJWZT17", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741430106, "uuid": "aa82b1e3-1afd-44a5-ad68-282be8ed5ecf", "value": 2091, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430106, "uuid": "88f70538-a8cb-4d08-9611-9f2d756f3be8", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3768a27-fc09-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741430433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430433, "uuid": "d6e2541e-e8ac-4a29-a8bd-9de4afc68e47", "comment": "Malware payload", "value": "1167b2d4a78c7c4a46a9b17eafb9fab1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430433, "uuid": "52ce449a-bf38-4d2e-b3c5-d5227a5ac9a9", "comment": "Malware payload", "value": "1e5c0f08fb08ac34002394134dde7667eaea941518a11c8f4535e221d2c5f7d2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430433, "uuid": "de0a5af8-4162-4d6b-901f-333d192eccfa", "value": "T13A9533222F7B94F8DC26CEBE5B0FE700B1645915D68ABDAF6F12433F756314192B08", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430433, "uuid": "d1c4aa14-7259-4798-b1b4-0872b445e3cf", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430433, "uuid": "edeef751-c3f9-4847-ad29-14c8e5334e49", "value": "49152:7vvILjQ1+Ed10PY7lzoCRahg/dqR6qzisAji6Det+Fke:L4k+30zScqRRnAm6StIk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741430433, "uuid": "f2b2b3e8-291f-45bc-a7a1-6a3a0168bdd7", "value": 1922560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430433, "uuid": "da08663e-dfec-4fd9-88da-c0375bbc736d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1da990a3-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware payload (Sliver)", "timestamp": 1741430584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430584, "uuid": "2dda42b4-86d1-4356-a2bb-4655fc3132c8", "comment": "Malware payload (Sliver)", "value": "3f3e053bb78614297353ed39e295ec16", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430584, "uuid": "ad7a51e6-1b28-4378-ae7d-1cbee8895edb", "comment": "Malware payload (Sliver)", "value": "1bb045d646817966963f196f64d80855f23fc5763754013cb0715e87acc90ab0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430584, "uuid": "79f0f39c-580e-40e8-9d71-a061f41b45b4", "value": "T164C329C6BBC5BCD7DA15123885A783292338FBC817C747131C3962351E636D0AE9B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430584, "uuid": "f6943fa5-4ed2-4f7c-8b98-44ec8d6e7eb7", "value": "2b83dad6a057c974a9f348f87f062273", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430584, "uuid": "a58abd41-08c2-4610-88e3-9dd51e692405", "value": "1536:fNe9kWkVWugB7VIvYU/kzpc/ApSXJjDHqBGpot12TNWm4m4Lg5MgIh:Vee217wT0qF4Nh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741430584, "uuid": "ee5fb590-a592-4989-ae30-0ec6f5a042c4", "value": 122860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430584, "uuid": "ff625642-3f51-482c-b3a5-22444b013e04", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a25d528-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741430766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430766, "uuid": "6e98c897-7479-4a53-a5ff-ae482957076a", "comment": "Malware payload", "value": "1c247212b29b2eb4310e62b16df767e7", "object_relation": "md5", "Tag": [ { "name": "Donut", "colour": "#38b838", "exportable": true, "hide_tag": false }, { "name": "DonutInjector", "colour": "#be18d9", "exportable": true, "hide_tag": false }, { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430766, "uuid": "73f266d5-0e89-4789-91d2-5cf2f66d44a8", "comment": "Malware payload", "value": "8ab79a47f367a5528da7cc10eb0a41a53e4b168448aa0b7956db110db22a2a31", "object_relation": "sha256", "Tag": [ { "name": "Donut", "colour": "#38b838", "exportable": true, "hide_tag": false }, { "name": "DonutInjector", "colour": "#be18d9", "exportable": true, "hide_tag": false }, { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430766, "uuid": "412a814c-0719-4039-b15c-8097d3433822", "value": "T17BF60A03E89610D5D4E9D1B48D214172B971785C1B7A33DB2BA1F7B42B32BF08EBA7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430766, "uuid": "6ea5fcd3-aedd-4091-8ada-a469d376d9a2", "value": "98304:S3Clei4EdVVAPIcdU6Mxs+r4v4/03n/rq90/PdEI3O4k4UA:CClescdTgs+sv00X/rq90ujA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741430766, "uuid": "a47fc54d-bb86-42be-9ad0-55132738abc0", "value": 15989980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430766, "uuid": "007ef5d1-eab4-4c6f-b193-9e3cf9328e89", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1741438145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741438145, "uuid": "c7ca503c-27f9-4c78-805d-6cce4fd820b5", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741438145, "uuid": "1d0bbdcb-f7ac-486e-a03f-cb5e6b3df261", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741438145, "uuid": "dfe2d718-d1ff-485d-91f7-c195fe8e0e82", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741438145, "uuid": "cfb592d9-6ee9-45c5-9f92-6781131567ae", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741438145, "uuid": "b5a0e528-fdc6-42d4-ba35-6cca251eb7a6", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10651fda-fc1f-11ef-aa53-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1741439582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741439582, "uuid": "928f630a-c799-4c87-a982-fda51e8ba7a2", "comment": "Malware payload (Phorpiex)", "value": "87dce6b601da9e68982ef5bc7628468c", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "CoinMiner.XMRig", "colour": "#354D4B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GandCrab", "colour": "#a35472", "exportable": true, "hide_tag": false }, { "name": "IOC", "colour": "#cbae74", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741439582, "uuid": "38d31060-1785-4173-8661-cc479d5ee1d2", "comment": "Malware payload (Phorpiex)", "value": "2246262e2df5b143d4bff663aceb85d7633ebcb91f2f641c2ab7936c942a8eb2", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "CoinMiner.XMRig", "colour": "#354D4B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GandCrab", "colour": "#a35472", "exportable": true, "hide_tag": false }, { "name": "IOC", "colour": "#cbae74", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741439582, "uuid": "a2bb3afd-5da5-45b5-8789-ddea23362d85", "value": "T12B93F842E590A07FFAE986FA91F68E68542CBF75134848E39250365BC7242FFBC750", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741439582, "uuid": "eed24ae9-2ade-46f1-93fa-b4d550b418ba", "value": "05232add98361a134fdaa26f6720c77a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741439582, "uuid": "24c2b7f4-342c-4daf-9ab3-07fd463fdd4c", "value": "1536:gm9HCOFmav82bMa5nWB4OUcvP0M8dd7xeeWnkUz:55gOzxtOUCMM8JZWn/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741439582, "uuid": "1d822da3-d4d5-4819-996b-874b9c9dca7c", "value": 89600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741439582, "uuid": "06bf5cbf-0497-4c1e-b457-f3c60d56cd96", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7d3b92e-fc1f-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741439836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741439836, "uuid": "ea88265f-b3e7-40d1-924c-98712a1907c7", "comment": "Malware payload", "value": "c779715c09375d44f5a12958fcff4dcf", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741439836, "uuid": "934c913c-4556-4e3d-94ec-a8f74c923a4b", "comment": "Malware payload", "value": "8dfdb0add35dc719c155fcee1caa81a81406041ff12ff2fd0d4de42dd6dbb008", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741439836, "uuid": "c1c4739c-b90a-4f29-ae8e-4b40f022af55", "value": "T100852337272B158BE1AB5974E65F6FAC153BC60241C238DEAD9F68E1D01DDF0660B2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741439836, "uuid": "c3e0988d-21b3-440f-a2d8-74a4aaf46e15", "value": "d6d754bef6235470bb834b2c72192e4d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741439836, "uuid": "e09cc4c7-34e3-40bb-9c52-235be09265f0", "value": "49152:bwH6RmnCnww72dUQxKMLty+T+p/1YUAmbhUGBF8nOj:bhYCnwFG6KuJ+pa9mbeOj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741439836, "uuid": "f5358463-441d-402e-b251-ebee6cd0174d", "value": 1740800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741439836, "uuid": "e0b312fe-2195-4a6c-97c2-42f938cc695d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45b72409-fc20-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741440101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440101, "uuid": "dde884a8-a1a4-4861-9112-f05510a70a83", "comment": "Malware payload", "value": "4c52cf849be8954638925c242e0cc976", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "CoinMiner.XMRig", "colour": "#354D4B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GandCrab", "colour": "#a35472", "exportable": true, "hide_tag": false }, { "name": "IOC", "colour": "#cbae74", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440101, "uuid": "e9f84e12-6760-4982-821a-e16147fceac7", "comment": "Malware payload", "value": "fa6fcf2e154c0b18b12ab86267ccd38d79cc9c27e7e261a7e9201a0a9dd9d0bb", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "CoinMiner.XMRig", "colour": "#354D4B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GandCrab", "colour": "#a35472", "exportable": true, "hide_tag": false }, { "name": "IOC", "colour": "#cbae74", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741440101, "uuid": "99469381-5b72-4d87-86a5-967f9fc6e6b1", "value": "T16822290B7DCA40A1E3904CF047F2878A8BBE94631B92B2CFB3B3C2595F5135184976", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741440101, "uuid": "2f0f0f52-96f1-4e45-ac63-5b96cb5685f3", "value": "e6eef170b092805b77c0546e3604d99f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741440101, "uuid": "c6b43ce9-6c94-4b2b-b527-661e573d0115", "value": "96:/L0paShFKPqYTdGLDad04DCcR+58DsrVJQsfuJxGEOaRh2qhRC7tCEMSI:/2hBMGtkR+iDswsWJxTOchthyMB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741440101, "uuid": "a6c79fc1-edc7-4eed-9ca0-dc7b005a3131", "value": 10240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741440101, "uuid": "583ced80-731f-4277-bc5b-ba41437790f9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc83f717-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741441213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441213, "uuid": "0b290c77-a8ef-4634-a0f0-8f7747f74c78", "comment": "Malware payload", "value": "d56e4165f6fed101c7d8e73a499a94fe", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441213, "uuid": "8eb7f116-9964-4be9-ae8f-8951abbaf8c2", "comment": "Malware payload", "value": "661fbb18ad3921c09efad5a71a07883c79b4db81ae8065dce828dfe1338d99e7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441213, "uuid": "8a4ebbdf-f51b-43df-8dce-0c291f192aa4", "value": "T1F606338FA2F62735C0962776D7AF2ED1A1D34C1F5475D28EA7C8B06160C9B0E3247B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441213, "uuid": "ed0bec26-96e0-415f-9f5d-08dbb7137a07", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441213, "uuid": "4d985dcd-bca6-47d8-bc52-eacf48a57997", "value": "98304:G2SuLEIef0bnwORwz/8s4tr7heN/6ArEWuGpX2Z:G2SswDks4t/heUmuGX2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741441213, "uuid": "fbfaf745-d572-499f-9ac1-8b248a113052", "value": 3940352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441213, "uuid": "51ac0952-a14c-40c2-9ed4-e313ed7c9276", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd4b4965-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741441268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "93b1628b-9208-446e-ade6-d9a3ad1a8dc0", "comment": "Malware payload", "value": "8e00053bfc83d6a9d6cc0afa800b32f3", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "02168496-8112-4caa-a00e-78afe5a6785e", "comment": "Malware payload", "value": "acbbcecced4d9f43aac90fbf7dcdb61f8b81fd34d9eb1f0fa6e1e715754882b0", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "08a4a0f1-e9c8-4e91-81c5-01a6595cef64", "value": "T166453384C55F033FFF8A6152D6615D1B18E5173CFA8B6CE8B06BAC6ECA346290094F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "a11830f9-e433-4acd-b0ba-c614b566b521", "value": "24576:ebRv5882bgk5rCZFJwSzdW4CjefG+1KhsMlsf4sg+7WoLs/3PDRigDmTOh2:kY82bN52ZESv/rXv4ooXDRB2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741441268, "uuid": "51e5089f-c04f-4933-b125-cab637033765", "value": 1202704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "d41354c6-8291-4f5e-a91b-877c3b4ef767", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd4b516b-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741441268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "71817a26-eeb6-400e-a650-209729c087b4", "comment": "Malware payload", "value": "f636fc22b2cc8f469f9fb0083d626c55", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "0fcd9a6e-e56f-4af8-a757-9584e3d0ee75", "comment": "Malware payload", "value": "52e6503de557f1a38b19dbb41f32232c60f52b909a98699f04a9179405a99e82", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "85477078-c2c4-43b5-9295-6b2b68768573", "value": "T1774533AADE9F0B4B145A673F3352F31700B8E783BAB95D2E171D05152BE18A9CF144", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "1e12ff6a-f88f-4043-8eaf-61fd75d75e13", "value": "24576:NqPbIt7Zx2Mhws1Xtpezw4v9ckEoBSgO34pawM3anC6dOu:8Pbng9UtlcrIUrOV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741441268, "uuid": "52092377-8951-447e-9965-f646d7eb4528", "value": 1216008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "4b6a3eb5-99fd-48ea-8ff5-42fa227bb7da", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd59765d-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741441268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "918bad63-b9df-41df-a165-5477875c9876", "comment": "Malware payload", "value": "7df37a1836fe78bbe3525f66f52e1970", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "f78e2db7-b851-4f53-a659-2eafc33adb92", "comment": "Malware payload", "value": "907cf8eaff733bed5ccb821bf9fd0000d36e49ca92a92e078afd7fddc8736466", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "fea1c7ad-4c07-460c-bc77-4a7a29b4ca9b", "value": "T1BB45333423245E0CEF5723B3A1353978DB7A76A4A8BF0F51C2461529D89E6FC7A360", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "009e66a6-c69c-4794-8289-b6197f3eb924", "value": "24576:oi/E/ls2/aW+1+oo0yFCcjJfIgqSaHbYaD92a9EolUonQqRQ99zUR9GoTyT:oF9+1+o5yF5jJFq5HbfD92auoeobytUM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741441268, "uuid": "3d245e11-714f-474a-9d8a-7a567cbb5c6d", "value": 1193992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "1c41140b-d405-450a-ba6b-dd3e7eb076f6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd5c62d9-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741441268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "5e9a4c69-2b2c-4135-a9f2-07814f2c3407", "comment": "Malware payload", "value": "2e014438bd3f280174b37f38c370d882", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "296faa7e-5e92-43ca-92ad-3ec84afe28fe", "comment": "Malware payload", "value": "d70c50b5eb5e3a7c64717eae651b06656dab4dece5a4df269fc983d4c1ba4d21", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "e048da5e-53f2-4cea-980a-883a8670c4b7", "value": "T12A45337047E79983667250A137D4D2E703F7C3E8DAED12FC1C92F8A6256468A0FC8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "61fa7fe1-8129-4a87-9797-5ea4a7f6caa1", "value": "24576:TMAqbRddhUzfAZr/4MMoMCl5S7ad0CMDkpS6cTuFrWujE+tl:YbRWzfA5hMK7KNks6guFrO+tl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741441268, "uuid": "b1e2841a-7003-4da8-b076-d08e1c3541ee", "value": 1216008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441268, "uuid": "c79518ce-b91d-4886-8f0d-e804939015c3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe4329b9-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741441269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441269, "uuid": "dccf4e42-5305-4518-b2bf-4ea2b9835c19", "comment": "Malware payload", "value": "92c44faf00fff4cee1fc7056a0cd3986", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441269, "uuid": "f0179f43-3cbc-43e7-8554-70f5db842c2b", "comment": "Malware payload", "value": "777c59cd53ba4f989cf5c91b63c95e86d91383fdaf18338e365da9b1ea1ada91", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441269, "uuid": "9240d20a-d87a-4b1b-aa3a-9fe6b01150ae", "value": "T1684533131697663970B028F5B8F23CD5B7A2D1C540B22B4234DA4F8FB924CA9A5FF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441269, "uuid": "7f3f96ed-ad9a-475d-a75f-7380a49bf386", "value": "24576:Ytj0sD2rHu3vPbaxtwAwuNsrli2tcvv4CAZUGMpX:Y9UHeStwT7rVtIGUGMpX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741441269, "uuid": "e4ce5730-77ae-44c5-b8a5-581eeebc0822", "value": 1199112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441269, "uuid": "2a1daa47-e80b-4e09-ada2-38c76ad0a886", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe6866f2-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741441269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441269, "uuid": "805c4515-1c1c-4d7c-b85e-6cbd6406edfb", "comment": "Malware payload", "value": "49a97abce71b1be674f03efa395d8e77", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441269, "uuid": "4de6dad4-df75-4a90-87db-1eb567d43a37", "comment": "Malware payload", "value": "44001021650655962dae93366d3a372bbd3380c1156f40dcd187db5d44caef64", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441269, "uuid": "8ff9dfdb-790b-4b29-9060-3119ecdb3241", "value": "T1C0453302E6EBDBFCEC7D641482CBE582CBE46546833F89B5C7A78460F67636D814C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441269, "uuid": "5b96e474-690c-43f3-8f0f-39827518edcb", "value": "24576:2G1ftOxl7MSaROxG3vDC4ThlxB6UzeMoO0ps4yrN8gX+6TAj:91lOorPLThl2UzTCpgX+qU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741441269, "uuid": "0ed07c44-ae9d-48d3-9fdc-48304053ada8", "value": 1197064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441269, "uuid": "d4b16743-f102-460d-ab7f-423b7be72183", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feaad669-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741441270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441270, "uuid": "8d3f1ff4-96f3-4e39-b2f9-164493322a3e", "comment": "Malware payload", "value": "6abfa18af55decda2d047949689a35f5", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441270, "uuid": "c1432b85-c5f1-496a-a448-13ab3d3a2f84", "comment": "Malware payload", "value": "b68ec779b2bb793037bd52d90dd922cdb41f1ffed3eaef9fa8d3e27f6a51e893", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441270, "uuid": "45df68fa-8061-41f2-bc4a-6249c6c887b4", "value": "T1274533ACCCA9457095F1F2D5028C7F174FF6A1AA206EB195D28835DF63183C2B3DA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441270, "uuid": "1303da4a-0c02-40f2-8029-ed7e34fb049d", "value": "24576:dYjtbZIfv9XZj5Xk/rYERUxsOXALxgQIpUaAnygfeKOpi:dmtafv9XZhk/rYESxsluURyqeK7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741441270, "uuid": "0ce53772-2b12-41cc-924b-d70d905855bb", "value": 1200656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441270, "uuid": "36423d0f-b5f7-498e-881c-418c3e584da2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe210825-fc23-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741441698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441698, "uuid": "b7890da3-d7ce-45be-9845-c472c2ed1892", "comment": "Malware payload", "value": "15c56d1d3ee3d2101c24e7a4d7c3c292", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441698, "uuid": "c6092909-b03e-4e5d-8182-859258f6ebec", "comment": "Malware payload", "value": "c4875eca80c1b5458aa8529ddf0d975d18e66af126dda3910846e305694b4982", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441698, "uuid": "3558cee5-37ab-4b89-866a-4f9f5adb484b", "value": "T19E26330E1A38993AC8E9B471F74E91F4E1B23E8F052516CD7B64E2B4876E3663791F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441698, "uuid": "6db1225c-43f5-473e-80ea-f657ab11d70b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441698, "uuid": "7b7098d8-60b6-48f2-9209-985c9d6eda26", "value": "98304:sW9pEz3mikHwa2XHQSWXFfyKNSwdZ4D2cEoTbhlMv3RGz4gr:79JiCCmFqKNSwduyCnYVgr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741441698, "uuid": "d624b825-dac4-4142-9abb-3dce33b92db1", "value": 4696576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441698, "uuid": "db6874b6-78f1-49b4-9331-464e89138fe7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37661db9-fc25-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741442224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442224, "uuid": "bdd791fe-72ba-42f4-bc66-3d4016a9bc8f", "comment": "Malware payload", "value": "d31ae263840ea72da485bcbae6345ad3", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442224, "uuid": "49245ccb-955b-4d62-ab10-81a7ea2db5d7", "comment": "Malware payload", "value": "d4717111251ccd87aed19d387a50770f795dda04d454a97ebe53b27ea3afe1fb", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741442224, "uuid": "477506b4-b0dd-4a06-b7f8-577a19391222", "value": "T1B8A67B3F7A668268C29DC17AE0578F50DA33F0742732C2EB5291357CCF26AD45E3A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741442224, "uuid": "443f7b80-e948-4821-bed7-19a64d84fcdd", "value": "c508679fd1d0f7b635a4c306dc9ffc18", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741442224, "uuid": "8547b3de-58fa-4158-8b99-39ccf2aef894", "value": "98304:bn8FP1Cw5vst3L1G3z/RYFrqHdygGIJCooX4zScqdZ6TZNDlJGy8K1IADyW:bkP161+YkyI0ooojkZelD8W7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741442224, "uuid": "1787e3f7-6866-4248-ac79-77714d87d62b", "value": 10120392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741442224, "uuid": "be80dfda-d588-4045-ad84-1aa9143b8c5d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3aabb9a3-fc26-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741442659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442659, "uuid": "dcb00226-7ef3-4cec-aa22-ffaa5cb69e87", "comment": "Malware payload", "value": "57b7392707347b9a2f434b7b00ef3731", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442659, "uuid": "034ce909-3b67-402a-90a6-1137adbaea04", "comment": "Malware payload", "value": "ccdbeb9c3f27c634fdf13f9f8ad40123141bc5b883f0a22961d34bd3dbe7b897", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741442659, "uuid": "ffd514fb-86ad-4e33-bec7-737c87145c97", "value": "T13D953322312B266DDEA509F662771B6C6F2E34C16EC44D272D58AFBC8A33D40CDD49", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741442659, "uuid": "f2d700d7-8170-4fc1-a05b-d64c8c7b41d1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741442659, "uuid": "8a51c96a-0c1a-4f35-b2ed-57cf94569a21", "value": "49152:qKgTH3ihRZkUoO4EplSTlo64/Z7PvjaJP4:qKgTX4RtJPSTlf4/Z7vjal", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741442659, "uuid": "a0a68473-f4ba-48c2-b3ed-3626402ee76a", "value": 1908224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741442659, "uuid": "e36b310d-13b2-479e-b3f6-3d9180c80920", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "065619cb-fc28-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741443430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443430, "uuid": "b4d40694-f72d-4282-82aa-81fdbf4472da", "comment": "Malware payload", "value": "32dc609568407d261f5a2edf8644ce76", "object_relation": "md5", "Tag": [ { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#04280F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443430, "uuid": "b7b42fc2-1bf2-4fa9-8788-019ea6bb1e1a", "comment": "Malware payload", "value": "16a0e939d42dbe39946c3a48bc07ec9b6ef565c0828f66be053d1320e5f7c4f7", "object_relation": "sha256", "Tag": [ { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#04280F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741443430, "uuid": "da214ac2-f6a2-40ab-a1cd-5fb51b7739a7", "value": "T15AC6331A82B0EE89DEA1257F44FB5F8E8888C5D5D67901B4D731618A3600D9BC7AF3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741443430, "uuid": "895976e5-c962-44b7-a3e6-a8768bcd36cd", "value": "196608:Pl9U7ZPBIpGYcJejL1fLOfyIbIDgPe/SgyqD5l93pqwOyB3oqDOcG96hq18y0Gv:PLoeL1iflbXPan3swOyB3oqDJG9gqi9y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741443430, "uuid": "d8acc685-6fbb-4ad2-b799-75dcca6319f8", "value": 12321022, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741443430, "uuid": "4a106c3f-04c1-42a0-95fe-d2e0fc9ebe14", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01e9d9e0-fc2a-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741444282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741444282, "uuid": "bfaeb681-457c-4b47-8422-16a80daa90e0", "comment": "Malware payload", "value": "43d8c72bc67d99dc88cc16871de62fce", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "fake-cookie", "colour": "#b018a5", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741444282, "uuid": "cd81ccf7-e3c5-437d-9c4c-7ced5f6ae78a", "comment": "Malware payload", "value": "01e4a72d4384cb95bb63621219152f2c7294a6e4d35ad909613c219092df78a9", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "fake-cookie", "colour": "#b018a5", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741444282, "uuid": "e9cdcd24-4a0b-42f4-aa34-bc59b2d28d0c", "value": "T1A8C0C0084074C92E1480F0FD86270CC1D20B1DD080B4EB8A3121FB604263A57F15C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741444282, "uuid": "4d1b280d-9c86-4c2c-b1c0-4962a7c88a1b", "value": "3:mKDDGKSSJJFI9IrFhmevcAZ1IKfD5uVilZGGIVLyAL3+C54S8YxTmbCOBmyh6B:hSG8qXme1IiD5uVirGGIcE4GTtp3B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741444282, "uuid": "3ed4d539-10fc-438a-ad20-95d5b4f323d4", "value": 179, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741444282, "uuid": "92c917e8-fb66-4554-a7cc-f93834b9e078", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85d8d823-fc2f-11ef-aa53-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1741446651, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446651, "uuid": "d223807e-e2a8-4a54-ad48-0df4d01906f9", "comment": "Malware payload (AsyncRAT)", "value": "1ab123dcf88da2c13c1ef29406e8686e", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446651, "uuid": "156766fd-2008-4753-b0db-e57a24f4c3df", "comment": "Malware payload (AsyncRAT)", "value": "9a813a7a6ceddc39bfe174b39737949e940d14e867aef9a0cfe5e95dc671f417", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741446651, "uuid": "244819ba-a0ac-4d3e-9db6-8d77dada0d8e", "value": "T1B754273068BB2699E437EF70AEDCB4FAD99CAB22144970BB154513478F62B80DD035", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741446651, "uuid": "01bf911e-46f2-4467-bcb8-c196acc23da1", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741446651, "uuid": "0ad4b4aa-fa57-4cc5-a852-d4efbf08d504", "value": "6144:3ZFocbdkYcNQcn6G0qCBVcmPnUjBue+sRLHxPeg11Z994k2TknfPcPm0KGBQa6yJ:3ZFocbdkYcNQcn6G0qyVc8UjBue+sRLO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741446651, "uuid": "71d155c2-10d6-4c8c-a384-b46e5afc9533", "value": 302080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741446651, "uuid": "4376ee95-c085-47b3-bbdc-045a729fcc8b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43642c98-fc31-11ef-aa53-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1741447398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741447398, "uuid": "371affc6-3270-4f26-9956-b8d75e9f83b3", "comment": "Malware payload (AsyncRAT)", "value": "570bc151bf5d20eea56d4ad306344238", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741447398, "uuid": "d0317206-ace5-4bb4-b4ec-dfec9bec18e4", "comment": "Malware payload (AsyncRAT)", "value": "1be3f3449a4fbe09203249d212c1abe8aead0d3e3ad9c499f0c0e9aaa76f198a", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741447398, "uuid": "28c52513-4e43-4822-9c37-6c3affafc466", "value": "T1D354241468FB2A59E033EFB5BFE8B9F9DDD8FD21648564BF010122078722A95ED135", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741447398, "uuid": "8c1c10ad-8d3e-4a5a-82d6-3756507152c3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741447398, "uuid": "68c1fe16-55ad-402c-99f4-c2fd054c72d8", "value": "1536:qg8buvyxUMWFKVwVp8M+MZZ/cPRXjqV6jZXsWxRGQ/EuRTxcLgfBZN0wpfMgn8Es:qv66xUTGLL0hJ7bbAvDYkYjUar", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741447398, "uuid": "db830567-68ab-4eda-aac8-2c365ff9dd1e", "value": 302080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741447398, "uuid": "3074fd1c-1c60-4f2f-bf27-180331d1aeb0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd7e7b2a-fc32-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741448032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448032, "uuid": "1400a464-f469-4fc4-a4df-114fc9987b56", "comment": "Malware payload", "value": "f60c4315a77f0a2f050c3e60d7fbe975", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448032, "uuid": "80a1f3c2-0e39-42a3-b423-a9748b037cac", "comment": "Malware payload", "value": "31b7a2eee7649ee4c871b556a23022a126092ba8bc3b07d2fe28f6cafa6ffcfd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448032, "uuid": "d8f3cb75-0374-42eb-8710-7a036aa95f73", "value": "T1CAE55B93B50571CFF4AA5678EC2BCE43685D43BB1B2108D7A82CA5BE7D63CC119B5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448032, "uuid": "93b8b114-6b8d-4a43-afe9-eba7f78232f4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448032, "uuid": "65896b8b-c6f4-4bb8-b6af-29c2aa1e9b9c", "value": "49152:qQeMAxsbRqf2xTTMnPdWmPF7cRQf52zQgDeO85Y:/eMACbRqf2xTT2P86FoU2rDeO85", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741448032, "uuid": "ae8ee4c2-19cd-45c6-b74f-3f607896ff05", "value": 3074048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448032, "uuid": "d4db8d8a-e3b4-4bc1-90ff-76893bbb2e67", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad30c73a-fc33-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741448435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448435, "uuid": "88f21f6d-0a0b-484a-9e87-3f947eba9d11", "comment": "Malware payload", "value": "3a684b497af86498fe2f8dc4c392cc51", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448435, "uuid": "5f2ef946-3bd3-4e95-95de-b08f6bb80ef1", "comment": "Malware payload", "value": "f832a90b90aed49ea52fabccce43ef1db001f732a01705346503581a6dd68dd8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448435, "uuid": "0ecef014-deb5-487c-9601-1f90ccca6698", "value": "T1FB9533018E5267EDC8E8A67BD3793F13B9A18B7720E19D35530DE4B522235102D68F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448435, "uuid": "c15c6f36-c130-44e4-a0a4-29cf3d197aa1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448435, "uuid": "f32c459e-330d-4e68-9810-4dfd74493485", "value": "49152:qS45uG6KgHzPsUs0MOlMYFVWUCDlUSdddDvSQTfTFO9IVwKd/:pc6RHLsp0jlMSVWUOlUS1DvS8c9i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741448435, "uuid": "3493546e-de7f-4327-be09-7ee68fecb469", "value": 1906176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448435, "uuid": "5c935966-4987-4038-a82c-4d869260e3a0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b95f9ae5-fc33-11ef-aa53-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1741448455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448455, "uuid": "c39ebb15-c169-4220-92d2-4d6a3bbce424", "comment": "Malware payload (AsyncRAT)", "value": "54df8488f9846073ecb993772e5d8a33", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448455, "uuid": "4069fa82-316a-4641-ad9b-92018576ef98", "comment": "Malware payload (AsyncRAT)", "value": "98a87f096f12468eef8b3e080c248c524db19cbea131006a89c7dfd1dd5defda", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448455, "uuid": "bd14d019-a864-43d6-8b3b-f182e526fe0f", "value": "T15654F82468FB2598E473EFB16FD8B8F9C96DBE21254964FB0042124BCB12E81DD539", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448455, "uuid": "ef465358-92b5-4a66-8632-31ac31ad676c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448455, "uuid": "4be51da4-e0f9-4e90-83dd-528fdf676ca9", "value": "6144:Y1DfJJma7vT27Rle+6xA7cQnuOsZ+gygOoQ2PDWT7cJMUGxNdHOzP/rO+JVIIo0n:Y1DxJV7vT27RletxAluOsZ+gygOoQ2PL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741448455, "uuid": "cf05ba4c-1e6c-4b56-99c5-f8697b530afe", "value": 302080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448455, "uuid": "1ada9219-6fb7-4c18-9dad-abb5296c3391", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffc2e4e3-fc33-11ef-aa53-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1741448573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448573, "uuid": "a899315c-0bda-4b66-a96a-7cbc4363a100", "comment": "Malware payload (Stealc)", "value": "015893afbf4349677658a5926c3c7cd0", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448573, "uuid": "3a0eab97-320a-4b6a-a0df-39a92500f365", "comment": "Malware payload (Stealc)", "value": "0eaedc0ea54d797d2665dd436c08c51652f96eacd7af714b5cc7095a19569521", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448573, "uuid": "ae7d1340-a74a-4e89-899b-4cfcf6995d43", "value": "T11E46338862C1C530D421BBB044FF41FF26B23E90427CD25F568E6A5CD175BD46ABA3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448573, "uuid": "6c5de139-6df3-44ea-8259-7bd23a35c829", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448573, "uuid": "abd2b069-0f4c-401e-b019-e6655604fdbc", "value": "98304:NubKG6hLVdXBvH9EuQXYZf+cv2wTiANlL1fw4pqbJzmFIVMXf5G6QGdi:4bxeLXBFEuQ2fVv2w+ANrfwoezm9QGU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741448573, "uuid": "6c23a988-2349-4a03-809b-95e5a95191dc", "value": 5672960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448573, "uuid": "2627c887-5465-431c-a5c5-05a443080f04", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5155fca-fc34-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741448904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448904, "uuid": "970a4c06-5848-445b-906b-2757f296ecc3", "comment": "Malware payload", "value": "16bcdf9f515993aa3f2e6e33fd867768", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448904, "uuid": "f3a33e18-f9d6-4112-bf2a-9f4cff6896e5", "comment": "Malware payload", "value": "873565936ff2ecf66e4efc7c211f555589deea3b94474e65fc5c9ca712a61d3e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448904, "uuid": "12a06f61-ea72-483c-acef-38f9b252cce4", "value": "T1A126331FFE739B32CBA125B2D34DB0F559598F4F627896C8A3C6758619FA30261073", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448904, "uuid": "6a860d26-63d0-489c-b5f5-52f1f8451cab", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448904, "uuid": "14eae3cd-7f8c-4930-9650-286bbcc7064a", "value": "98304:rON6Bu+xEklF8l+IFAgsjcff9as+VT2h2MRGAs9YbNuYj:rOoBu+aw0higTfn+c2F9YwQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741448904, "uuid": "3e6d848a-e25a-4615-ab46-f62eb145654a", "value": 4756480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448904, "uuid": "1495f307-4785-4054-b05b-4fe268404894", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50574237-fc35-11ef-aa53-82aee05be84a", "comment": "Malware payload (XWorm)", "timestamp": 1741449138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741449138, "uuid": "44195ade-d66b-4566-b7cd-c2bea07f9555", "comment": "Malware payload (XWorm)", "value": "2b6b02943108b009beff18a6001aa8d5", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741449138, "uuid": "6baef960-bd21-4164-af84-ce08fd489c36", "comment": "Malware payload (XWorm)", "value": "01565baa85ddb4b7034c620d9428024b43ae2375b8311e84aa7f06b91cc2c414", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449138, "uuid": "00eaedbf-49c9-4a0d-8b8b-bfa1a3d620eb", "value": "T173544D286CFB5599E033FE74AFDCB8F6C95AFE62614964BD0180130ACB22641ED539", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449138, "uuid": "429564bf-f0f4-4cba-9d16-91b6e94dfd1d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449138, "uuid": "f8a642cf-db2f-47b6-be37-ef6910950f5d", "value": "6144:ztphTL2ojyoWcUnqaok6vfdUkD4LxG3yat6mfourGr/x+2bMq6YH+zBGh5KihRGf:ztPTL2ojyoWcUnqaok6vfdUkD4LxG3yq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741449138, "uuid": "9f508e37-f83f-4483-bfd1-f3daa4a2c577", "value": 302080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449138, "uuid": "ecac4dda-d4c0-4d72-8509-511c90a60de4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "609692a0-fc35-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741449165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741449165, "uuid": "9fe8fe53-0716-467a-9aa3-ce49fec40e9b", "comment": "Malware payload", "value": "b202a7f2081518e1995d48b2483cb91b", "object_relation": "md5", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741449165, "uuid": "0a8adb68-69c9-468e-ade7-4688bc581d1f", "comment": "Malware payload", "value": "4a7512501bfb8bb4cfd990415a831d0ae73bd5a07e4ed31e588e74ee5ca96858", "object_relation": "sha256", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449165, "uuid": "ad30e18e-2eaf-4271-93c2-610f813ec180", "value": "T126B1832291D404121433E068AAB4AB4DFDF0417F66529B07315C3BABAFF3885CB67F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449165, "uuid": "c5a1fa78-fd70-468b-82a1-3199421ce4e1", "value": "96:p7SyUuPq89edlls9XFAi+7M1uyTNpENoOelVTtVgLO:oyUu7edkkXw5TNpNVBEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741449165, "uuid": "b578898e-0566-4c38-b790-a3bb4feeb2b1", "value": 5223, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449165, "uuid": "00a2d4c4-4116-484a-87e8-e5179df0d7c6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7032b246-fc35-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741449191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741449191, "uuid": "e339bf6e-19c2-4bdd-9862-5f4d66b620b0", "comment": "Malware payload", "value": "45ee9a83713529f0caaa6cc01001cbec", "object_relation": "md5", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741449191, "uuid": "5979fe02-ae60-41a9-b5e1-a568b9e457d2", "comment": "Malware payload", "value": "a532bca6bf4c1541ccccc588963762a8b65af6df2b82cbfeb495c16cd5900164", "object_relation": "sha256", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449191, "uuid": "404446af-528a-48dc-b7b2-e6fb4ff262c2", "value": "T1C1B1812291C408125433E0689AB4AB4DFDF0417BB6529B07315C3BABAFF3985CA6BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449191, "uuid": "107a198b-ecb3-470b-adaf-45a7375cebe0", "value": "96:g7SyUuPq89edlls9XFAi+7M1JTNpENoOelVTtVgLO:byUu7edkkXwJTNpNVBEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741449191, "uuid": "a06d4159-f7b7-4c70-8bb7-b737b6e7a09e", "value": 5234, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449191, "uuid": "76bf6e65-9a98-46cb-8ccb-488b5cf6ac25", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b947754-fc3b-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741451734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741451734, "uuid": "752e2245-d304-48ca-8eaa-fcf94c9cfbfd", "comment": "Malware payload", "value": "200f4139f65de53d6b05d5522b95aa41", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741451734, "uuid": "0fdf8d81-5a04-449a-b4d7-ddd3a9dea0ae", "comment": "Malware payload", "value": "e5af760499f1c20f031f04f2e6a87ff4095059c68473a8f244d378ea12430531", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741451734, "uuid": "6586acb0-1643-427f-8bbc-44625d25d937", "value": "T1BB272EE7317C230EDB82A4BDC2ABE964BD597BC70C6015877AA61D147E81435D3B3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741451734, "uuid": "c6d27da2-352d-4e6d-a5f4-842930714af6", "value": "98304:LsmBVXSpAEiXkM485+q6eVbRDcWlG2OddsoOY2y7Cju54Xj4XIdJzXseZvr9prPK:PLNG1oR7sep9bZf5BgP1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741451734, "uuid": "117babb5-afc8-43e1-aca7-2963f4d0aa10", "value": 20709296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741451734, "uuid": "fe115e38-9999-40d4-bf6b-44b1111d8538", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1a440f7-fc3b-11ef-aa53-82aee05be84a", "comment": "Malware payload", "timestamp": 1741451905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741451905, "uuid": "d2394fa3-eb16-4c3b-be5d-5d1ed1ec347a", "comment": "Malware payload", "value": "08d8001778fabdc0d73f75bb8a4d401f", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741451905, "uuid": "ecd4c0ca-6fa1-4369-b7a1-4dbc4b5f4594", "comment": "Malware payload", "value": "f64e8922c2f3f230f05e9bd05bb29a75e125679028bf86f9a2069c80f1047667", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741451905, "uuid": "46864132-f098-413e-9499-7c88f654093c", "value": "T189159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741451905, "uuid": "d565be33-d56e-4c40-8f59-5feac3f8f287", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741451905, "uuid": "feb874a8-4cd0-4859-8b1d-3226b9c9abdf", "value": "24576:AqDEvCTbMWu7rQYlBQcBiT6rprG8a0gu:ATvC/MTQYxsWR7a0g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741451905, "uuid": "cd3a2e38-7421-40d9-a8b4-a67fdfdd0987", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741451905, "uuid": "2cf90861-b89a-46e1-9af0-26a340cd199f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cc68910-fc3c-11ef-aa53-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1741452111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741452111, "uuid": "18c74cd5-d507-472e-9bf6-ef26a2e8a9d0", "comment": "Malware payload (Healer)", "value": "ab8b8aaddee0d653cdfe2011995b68d4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741452111, "uuid": "f1108167-45c1-4cd1-9f9b-0d2a53deaaaa", "comment": "Malware payload (Healer)", "value": "3e24fd0d4f905ccfca7d3585059ed1d466b5ec565bae60c0413d58155381883c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741452111, "uuid": "4dfa0142-328b-44bd-9784-52b00c90b385", "value": "T1D0D52A62A805B1CFE48E1679D177CD82D96D03F94F224CC3A96CB5BABD63CC119B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741452111, "uuid": "d57207d3-4754-4107-b250-d9ac65d3f528", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741452111, "uuid": "21fe6af2-e398-492d-be2d-4af135124cfb", "value": "49152:FbdBMwIz/oMYPwXuCuPcv8OSwYTroL8aAz2WLiLfVvFt:Fb3MPLoMYYrdv8OSnrUahLk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741452111, "uuid": "9b9edb86-6748-4f51-92dc-3ae166c5a9ac", "value": 2833920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741452111, "uuid": "5ee39fd5-75e1-43d9-b699-5a0fa3fa7fea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1741471958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471958, "uuid": "31dfbc18-2798-4091-8ff2-a5d5d2c1a1fc", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471958, "uuid": "81ba35d7-4dc2-490c-8d1d-d306c956f8aa", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741471958, "uuid": "9c5661ec-9f32-423f-b59a-587c396c4f2c", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741471958, "uuid": "0549b6d8-86af-4b13-98fa-769bff16b9bb", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741471958, "uuid": "5f4136e3-86a8-4b38-a85a-8804ce2af30a", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1741471960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471960, "uuid": "798134c8-31e0-451a-b73a-b5d43989adad", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471960, "uuid": "42476287-e0c4-4aa7-8a01-c4a785c481a5", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741471960, "uuid": "6bb6ef94-f560-4ba8-a456-57b23fac2688", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741471960, "uuid": "8c94aee4-e7ab-4d72-a77b-3645ea9d5610", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741471960, "uuid": "14293ac0-65ef-41c3-92c1-48dd769b584c", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741471960, "uuid": "fba7c7fc-1422-4a85-b882-d34c4c3712c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741471960, "uuid": "897e72a0-7da8-46ad-af58-c17ca0f197a6", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "834a8e8a-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware payload", "timestamp": 1741471987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "f295c8ed-8eb5-49ea-bbd7-15861358ad16", "comment": "Malware payload", "value": "f9fe873316a74e0d1c93357a904e133f", "object_relation": "md5", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "a2e4bb43-7178-4745-962d-555ebc97ffed", "comment": "Malware payload", "value": "b6cbf3bb81c4b91c2aa4552b4767106b9e9510e9e0cc21053913849882609e0c", "object_relation": "sha256", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741471987, "uuid": "804ace54-c102-4d09-9817-81bdd55ae0cc", "value": "T12D448F01B5D1C872D972057158B4ABB95A3EB9200F7099FB53D41F3ECE706C0AB73A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741471987, "uuid": "5dbc3c4e-72a8-4cae-a25b-e76304906db3", "value": "db3aeeba15dbf2707fad3ba5becf2830", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741471987, "uuid": "0e4f65d4-4ee4-4e00-a881-f5185a36f229", "value": "6144:cqvwbHMtaRWwVa2+B1fUaio83mMXSrlGhAOZpEBv:cqvwbPWwU2+XHkxhlEB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741471987, "uuid": "fdad3b02-6702-4cdc-b36f-41016b3639fc", "value": 263168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741471987, "uuid": "6fd0a601-8cc7-460c-bfed-c149a58ec5fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1741472048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "ced59527-ef1b-4bb6-b1c2-7382c1f098c5", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "2506f2c3-7cf3-4c61-974a-f45b756fa344", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741472048, "uuid": "e859b78a-7979-4617-87c2-85898c362ae2", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741472048, "uuid": "8123d3ad-3ec2-4855-b6cb-53fcea403e42", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741472048, "uuid": "6c98eacc-50f6-4133-b3ae-ad252cf2a166", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741472048, "uuid": "0ad73828-b6e6-498a-85f8-491e77c80e93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1741472048, "uuid": "8406dcfa-cdc9-4021-b94c-7b78a350db23", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "704fa073-fc6d-11ef-9f33-82aee05be84a", "comment": "Malware payload", "timestamp": 1741473243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1741473243, "uuid": "9b23a037-17ae-413c-8577-63ba1cdb69e5", "comment": "Malware payload", "value": "e0c0873263eb23d5092363f938ea9ca2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1741473243, "uuid": "86936269-dbae-45c9-9079-9815486123b6", "comment": "Malware payload", "value": "8d411d1ec4327e5a10b8ffddaacdac17a0a6acab43db81202119604b35c7317b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1741473243, "uuid": "8385b2f5-614f-4ea4-9462-dbadef649028", "value": "T17713029051801BBBFA9A763A68C10D5CB677F0C18C4FA78F27A46CAD24B253E8534C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1741473243, "uuid": "5759163b-b9b9-4835-8a17-c60d6f223f74", "value": "768:+dFzMBVZYHMJjNN5/hb1dziL2ts+hL7+BoPLJN1bTZCwWkx1ASMCijh:QzyZYkjrb1duL+nRX13ZCdkx1ASXi1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1741473243, "uuid": "33bf18d3-2c59-4078-a4d2-469356b84719", "value": 44988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1741473243, "uuid": "7268a469-8842-46d9-9473-2e16dba7a3e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392142, "uuid": "9c09839c-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.59.105:38260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392243, "uuid": "d8747534-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.6.252.7:55289/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392243, "uuid": "d8ac3891-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.94.254:45381/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392244, "uuid": "d8c13470-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.35.107:59385/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392245, "uuid": "d96586ee-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.153.95:44514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392245, "uuid": "d9669270-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.240.62:34880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392245, "uuid": "d96eb121-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.122.74:58110/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392247, "uuid": "dac1868e-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.108.235:43684/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392260, "uuid": "e2d020e8-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.112.37:36079/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392272, "uuid": "e9f0f151-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.18:10543/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392364, "uuid": "209ae80a-fbb1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.235.131.151:41654/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392544, "uuid": "8be2298f-fbb1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.0.55:49105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392964, "uuid": "85feb5e4-fbb2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.215.119:35059/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741392965, "uuid": "86a3d31c-fbb2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.98.93:43456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393144, "uuid": "f1965ace-fbb2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.211.131:43644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393223, "uuid": "208a8cc5-fbb3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.17.6:51042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393264, "uuid": "390545a4-fbb3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.208.231:45959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393384, "uuid": "806e3d62-fbb3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.112.39:36252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393565, "uuid": "ec6c4419-fbb3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.253.209:60615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393566, "uuid": "ed089d04-fbb3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.55.177.237:37242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393744, "uuid": "57573df6-fbb4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.59.105:38260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393865, "uuid": "9f547429-fbb4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.151.213:57616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393926, "uuid": "c3c4a87a-fbb4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.132.132:34735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393985, "uuid": "e6e852f4-fbb4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.153.95:44514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741393986, "uuid": "e772359b-fbb4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.57.101:57837/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741394226, "uuid": "769eda41-fbb5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.84.149:60323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741394553, "uuid": "394815fa-fbb6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.98.93:43456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741394706, "uuid": "94536ae0-fbb6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.148.190:48033/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741394721, "uuid": "9db0947c-fbb6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.192.38:44006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741394825, "uuid": "db581753-fbb6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.104.175:56619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395005, "uuid": "46e46bee-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.17.6:51042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395006, "uuid": "47441eb3-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.8.193:58223/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395022, "uuid": "509f8ce0-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.6.120:41360/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395125, "uuid": "8dfd65e9-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.218.80:53976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395143, "uuid": "9930b821-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.26.83:44578/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395185, "uuid": "b2231cde-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.181.92:40627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395245, "uuid": "d57d4a47-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.248.21:45793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395424, "uuid": "40b1189f-fbb8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.240.62:34880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395544, "uuid": "87e59676-fbb8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.90.213:58712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395544, "uuid": "87f3cfb2-fbb8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.57.101:57837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395545, "uuid": "886ed6cf-fbb8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.143.186:36529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395664, "uuid": "cf6e7e30-fbb8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.187.124:59720/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395786, "uuid": "1815569b-fbb9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.38.123.165:40736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741395844, "uuid": "3aea3a40-fbb9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.148.190:48033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396049, "uuid": "b4b19a33-fbb9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.129:60873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396144, "uuid": "eda9c5b5-fbb9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.104.175:56619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396325, "uuid": "596b8b5d-fbba-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.124.170:46572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396384, "uuid": "7c9ace5b-fbba-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.218.80:53976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396385, "uuid": "7cf10475-fbba-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.124.170:46572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396445, "uuid": "a10f2438-fbba-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.33.210:46486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396460, "uuid": "a9e06665-fbba-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.192.38:44006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396504, "uuid": "c45eca7d-fbba-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.148.86:39557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396505, "uuid": "c48d9c91-fbba-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.248.21:45793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396505, "uuid": "c4f51e99-fbba-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.6.120:41360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396632, "uuid": "108bfeef-fbbb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.220.19:39020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741396985, "uuid": "e2df9371-fbbb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.26.83:44578/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741397301, "uuid": "9f53b84d-fbbc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.165.137:51403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741397406, "uuid": "ddc01016-fbbc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.142.17:51068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741397526, "uuid": "258cef34-fbbd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.112.53:55803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741397527, "uuid": "25c3eee4-fbbd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.29.62:38408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741397644, "uuid": "6bb7f83a-fbbd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.186.142:34295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398004, "uuid": "427859ba-fbbe-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.129:60873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398032, "uuid": "532722be-fbbe-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.165.137:51403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398186, "uuid": "ae9def2e-fbbe-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.220:54609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398323, "uuid": "00610ef7-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.167.14:48395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398425, "uuid": "3d02d300-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.82.124:39407/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398431, "uuid": "40fa19ba-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.17.121:39238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398433, "uuid": "41b58d23-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.15.244:55864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398544, "uuid": "83eb6949-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.112.53:55803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398551, "uuid": "8885bf14-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.8.193:58223/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398605, "uuid": "a8a9abad-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.124.19:36018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398666, "uuid": "ccb1fe71-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.226.97:33658/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398905, "uuid": "5b3a9855-fbc0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.29.62:38408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741398982, "uuid": "896cd4a5-fbc0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.115.127:43232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399025, "uuid": "a294ec95-fbc0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.133.185:49047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399025, "uuid": "a2d10cc2-fbc0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.191.138:42026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399085, "uuid": "c6a329fe-fbc0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.8.183:54659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399144, "uuid": "e984768f-fbc0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.142.17:51068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399444, "uuid": "9c9543bc-fbc1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.78.63:43491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399863, "uuid": "966dc6e8-fbc2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.110.234:35998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399985, "uuid": "df3e1e6e-fbc2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.73.190:60173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741399988, "uuid": "e0d5d5a3-fbc2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.8.160:38402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400044, "uuid": "0246710d-fbc3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.226.97:33658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400106, "uuid": "26d5d3fb-fbc3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.73.190:60173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400106, "uuid": "26f2ed70-fbc3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.8.160:38402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400284, "uuid": "91556087-fbc3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.17.121:39238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400284, "uuid": "917d19e2-fbc3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.115.127:43232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400285, "uuid": "9189f03b-fbc3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.103.186:50589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400345, "uuid": "b55bab84-fbc3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.45.97:46959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400405, "uuid": "d99cee72-fbc3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.8.183:54659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400438, "uuid": "ed1e49d3-fbc3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.6.234:38683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400604, "uuid": "4fcdee78-fbc4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.99.73:55567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400766, "uuid": "b03ce8c6-fbc4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.228.51:41478/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400885, "uuid": "f78b5a3a-fbc4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.15.66:44842/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741400963, "uuid": "26145bcc-fbc5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.231.147.243:40051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741401005, "uuid": "3f34a91e-fbc5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.171.188:46369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741401731, "uuid": "ef66f9b6-fbc6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.57.173.69:43368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741401845, "uuid": "33b55f4a-fbc7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.38.139:41079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741401845, "uuid": "33e0bc97-fbc7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.13.238:56163/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741401846, "uuid": "33fb90d9-fbc7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.6.234:38683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741401905, "uuid": "575ba58d-fbc7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.187.146:44668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402444, "uuid": "98b203ae-fbc8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.15.66:44842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402634, "uuid": "0a267cdc-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.81:54903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402686, "uuid": "28b2b30e-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.148.80:50192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402806, "uuid": "70426bf6-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.78.63:43491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402886, "uuid": "9ff9e05f-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.59.219:39401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402983, "uuid": "d9fa9838-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.12.22:46303/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402986, "uuid": "db8abfe5-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.218.214.168:36787/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402986, "uuid": "dba093db-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.134.41:35011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402986, "uuid": "dbb9e886-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.86.154:35402/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402989, "uuid": "dd5e078f-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.203.72.148:39175/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741402989, "uuid": "dd5f6d25-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.68.56.159:43032/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403000, "uuid": "e44057b4-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.15:34409/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403013, "uuid": "ebbc09a2-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.131:10048/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403013, "uuid": "ebbd7730-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.2.44:47915/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403014, "uuid": "ec28d593-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.131.40:40088/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403044, "uuid": "fe097cc3-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.137.41:46341/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403045, "uuid": "febf3a34-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.90.113:59734/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403045, "uuid": "ff0f7fc7-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.147.5:55152/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403072, "uuid": "0f14cd20-fbca-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.230.66.62:10892/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403072, "uuid": "0f14cef6-fbca-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.249.252:11855/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403072, "uuid": "0f1622de-fbca-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.137:11890/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403072, "uuid": "0f162403-fbca-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.1.230:33298/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403073, "uuid": "0f7adfe8-fbca-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.48.66.237:39533/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403104, "uuid": "21de9926-fbca-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.57.173.69:43368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403164, "uuid": "460b1a02-fbca-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.241.151:53445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403165, "uuid": "465fb8a8-fbca-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.239.82:33348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403285, "uuid": "8dec53d8-fbca-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.29.51:58437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403405, "uuid": "d5369277-fbca-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.13.238:56163/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403467, "uuid": "fa69f3cd-fbca-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.131.43:52308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403705, "uuid": "880bb6cf-fbcb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.241.151:53445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741403827, "uuid": "d0de95e9-fbcb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.131.43:52308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741404063, "uuid": "5db6980d-fbcc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.163:50569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741404063, "uuid": "5dc90738-fbcc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.163:50569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741404424, "uuid": "351effd3-fbcd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.13.207:48530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741404425, "uuid": "3535bcd3-fbcd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.75.199:58652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741404484, "uuid": "58e320f6-fbcd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.148.80:50192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741404485, "uuid": "592d9d44-fbcd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.29.51:58437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741404680, "uuid": "cd7e9ac5-fbcd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.50.134:44176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405206, "uuid": "071d2692-fbcf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.134.41:35011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405265, "uuid": "29fb19d0-fbcf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.73.253:60845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405325, "uuid": "4df3c1c7-fbcf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.116.148:39775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405444, "uuid": "94f30c57-fbcf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.38.139:41079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405445, "uuid": "952b6c42-fbcf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.202.90:38466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405505, "uuid": "b9285f3e-fbcf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.129.40:39953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405506, "uuid": "b9cbb940-fbcf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.83.119.118:57489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405624, "uuid": "004ab3d6-fbd0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.38.56:56671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405806, "uuid": "6c572904-fbd0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.12.127:47979/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741405986, "uuid": "d7aabeaa-fbd0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.10.70:51410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406165, "uuid": "424a2ba3-fbd1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.75.199:58652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406225, "uuid": "6638ed80-fbd1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.83.139:45727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406228, "uuid": "68526d97-fbd1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.24.204:34034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406463, "uuid": "f43ba6df-fbd1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/Sakura.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406474, "uuid": "faab4905-fbd1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.186.22.45:50476/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406586, "uuid": "3d5c23a3-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.213.179.18:58497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406713, "uuid": "893bebb9-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.212.157.142:59683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406764, "uuid": "a78ce834-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.175.212:38182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406765, "uuid": "a7f0050d-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.191.225:54412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406771, "uuid": "abe3cafa-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.220.145.93:36718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406825, "uuid": "cbe14f33-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.220.145.93:36718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741406885, "uuid": "ef7ef3fa-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.159.90:56591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407065, "uuid": "5b124b60-fbd3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.239.82:33348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407125, "uuid": "7e84d217-fbd3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.12.127:47979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407186, "uuid": "a3208c0e-fbd3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.228.11.237:43044/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407305, "uuid": "e9ea3d16-fbd3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.129.40:39953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407424, "uuid": "30d05a84-fbd4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.157.29:49447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407545, "uuid": "79190704-fbd4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.49.243:46071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407604, "uuid": "9c8964d5-fbd4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.38.56:56671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407663, "uuid": "bf7ed5c2-fbd4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.10.70:51410/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407663, "uuid": "bf811300-fbd4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.83.139:45727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407664, "uuid": "bfc68e6e-fbd4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.197.108:52161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741407739, "uuid": "ed03cacd-fbd4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.24.204:34034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408025, "uuid": "975ae0fa-fbd5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.103:53665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408053, "uuid": "a79fc8e2-fbd5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.241:40290/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408084, "uuid": "ba44d58e-fbd5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.74:41259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408384, "uuid": "6d4c159e-fbd6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.65.196.8:39001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408384, "uuid": "6d50b9c4-fbd6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.191.225:54412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408461, "uuid": "9b2cdcb9-fbd6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.7.7:34522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408505, "uuid": "b560eada-fbd6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.110.234:35998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408522, "uuid": "bf94de1b-fbd6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.26.39:48802/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408684, "uuid": "2017745f-fbd7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.228.11.237:43044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408745, "uuid": "4456918d-fbd7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.141.203:45112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741408924, "uuid": "af40d808-fbd7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.197.108:52161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409044, "uuid": "f6b67e0d-fbd7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.245.236:36853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409046, "uuid": "f7a1b78b-fbd7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.186.22.45:50476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409133, "uuid": "2b766289-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.194.102:60968/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409165, "uuid": "3e71bdc0-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.148.155:58262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409225, "uuid": "6267cb1f-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.125.50.8/mVsXkjvb3/Plugins/clip64.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409225, "uuid": "6272e37c-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.125.50.8/mVsXkjvb3/Plugins/cred64.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409285, "uuid": "86668100-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.123.17/487/ossio.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409344, "uuid": "a9a0265d-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.103:53665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409369, "uuid": "b8552997-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.243.155:34100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409425, "uuid": "d98442db-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.50.83:57105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409464, "uuid": "f0f0dc5d-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://67.214.245.59:49734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409584, "uuid": "389d56e4-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://tag.shufflerline.shop/code.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409585, "uuid": "38ea379f-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.180.255:43352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409764, "uuid": "a3f2c2db-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.213.179.18:58497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409823, "uuid": "c6b5da66-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.5/jklarm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409823, "uuid": "c6b781be-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.5/jklarc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "c7a1295b-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/a-r.m-6.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "c7b49e68-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/x-3.2-.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "c7b4a173-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/a-r.m-5.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "c7b5d672-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/x-8.6-.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "c7b6e69c-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.5/jklspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "c7bbfbf7-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/a-r.m-7.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "c7bf938c-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/m-i.p-s.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "c7bf9b44-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/i-5.8-6.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409824, "uuid": "c7c7375f-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/m-6.8-k.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409825, "uuid": "c7d7fd27-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/a-r.m-4.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409825, "uuid": "c7dfb793-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/m-p.s-l.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409825, "uuid": "c7e30021-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/s-h.4-.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741409825, "uuid": "c81b649f-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.80.231/p-p.c-.s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410063, "uuid": "5630c5f5-fbda-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.65.196.8:39001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410186, "uuid": "9f435a8b-fbda-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.71.246:60859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410425, "uuid": "2dcd2ef3-fbdb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.94.211:57024/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410426, "uuid": "2e4e8412-fbdb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.83.114:50787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410484, "uuid": "5123471a-fbdb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.143.186:36529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410663, "uuid": "bbc1877e-fbdb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.90.113:59734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410664, "uuid": "bbf2ad5a-fbdb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.71.246:60859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410678, "uuid": "c43b8f5b-fbdb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.59.243:42249/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410724, "uuid": "e02b3d1c-fbdb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.148.155:58262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410785, "uuid": "048f1b51-fbdc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.190.167:37263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741410964, "uuid": "6ec94024-fbdc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.157.29:49447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411145, "uuid": "da9603b3-fbdc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.180.255:43352/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411205, "uuid": "fe962117-fbdc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.157.70:43961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411264, "uuid": "219f1eed-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.94.211:57024/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411281, "uuid": "2ba3010a-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.166.125:45278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411326, "uuid": "469976b4-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.190.167:37263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411353, "uuid": "56dfecc5-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.166.125:45278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411386, "uuid": "6ab44bc0-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.194.102:60968/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411449, "uuid": "8fe6aba0-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.238:46272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411450, "uuid": "907ab090-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.124.4:49216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411565, "uuid": "d4fcf236-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.201.43:34034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741411685, "uuid": "1ce03b91-fbde-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.83.114:50787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741412163, "uuid": "39dba49c-fbdf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.90.113:59734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741412164, "uuid": "3a5713e6-fbdf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.211.137:34997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741412344, "uuid": "a5c5df38-fbdf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.36.152.194:60036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741412344, "uuid": "a5c76e86-fbdf-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.59.243:42249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741412789, "uuid": "aec624ef-fbe0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.puckerlinguist.shop/Siarhei_Korbut_-_Garden.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741412884, "uuid": "e759698c-fbe0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.238:46272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413006, "uuid": "2fd1077f-fbe1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.36.152.194:60036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413065, "uuid": "52fd60f0-fbe1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.121.26:41982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413245, "uuid": "be65b228-fbe1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.3.118:60601/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413305, "uuid": "e29a604d-fbe1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.205:37165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413485, "uuid": "4d554f95-fbe2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.0.242:41949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413546, "uuid": "720c91ad-fbe2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.99.103:33340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413663, "uuid": "b7e8a6a9-fbe2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.144.33:51880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413785, "uuid": "003517ec-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.124.161:34323/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413785, "uuid": "0099274d-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.159.45.164:46517/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413787, "uuid": "015bba80-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.163.170:35288/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413787, "uuid": "01c47002-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.209.79.238:45725/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413802, "uuid": "0a86f9a2-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.179.81:41617/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413802, "uuid": "0aca4183-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.107.58:37644/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413811, "uuid": "0fb4520b-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.72.83:47456/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413815, "uuid": "1204c49e-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.6:10070/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413815, "uuid": "1204c4f5-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.213.107.216:44333/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413815, "uuid": "120a7323-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.104:10801/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413815, "uuid": "124756ea-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.208.81:54285/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413815, "uuid": "12475a52-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.10.136.59:40429/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413815, "uuid": "12475b68-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.115.58.61:45766/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413815, "uuid": "125456e1-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.48.66.171:39533/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413815, "uuid": "12561bf5-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.249.214:10259/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413815, "uuid": "1272e970-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.86.107:50883/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413847, "uuid": "256c63c0-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.124:50592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413908, "uuid": "49bcb786-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.105.97:32825/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741413967, "uuid": "6cb44dc7-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.54.251:48921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414085, "uuid": "b37c3994-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.242.65:60649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414204, "uuid": "fa210898-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.246.164:50564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414384, "uuid": "654f0513-fbe4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.28.69:35406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414565, "uuid": "d13682b3-fbe4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.135.72:44188/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414580, "uuid": "da7f832b-fbe4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.64.157:56774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414625, "uuid": "f4dc06f7-fbe4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.175.212:38182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414625, "uuid": "f5306e98-fbe4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.103.217:39165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414744, "uuid": "3c392938-fbe5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.201.43:34034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414746, "uuid": "3cf85fc2-fbe5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.54.251:48921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414805, "uuid": "602eecf7-fbe5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.246.164:50564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414925, "uuid": "a7cf2710-fbe5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.3.118:60601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414926, "uuid": "a83b0363-fbe5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.99.103:33340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414926, "uuid": "a8a4e94c-fbe5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.134.152.146:60069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741414985, "uuid": "cbac5372-fbe5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.121.26:41982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741415045, "uuid": "ef886dc2-fbe5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.242.65:60649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741415327, "uuid": "9797c6da-fbe6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.187.60:45911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741415480, "uuid": "f2ec8304-fbe6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.88:34102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741415529, "uuid": "0fd27a8b-fbe7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.201.121:37147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741415585, "uuid": "3193d5d1-fbe7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.211.137:34997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741415763, "uuid": "9b47fc21-fbe7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.21.124:34265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741415945, "uuid": "07b1420d-fbe8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.6.213:53694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741415945, "uuid": "07e0a322-fbe8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.134.152.146:60069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741416125, "uuid": "730e1f26-fbe8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.223.86:57247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741416244, "uuid": "ba11ee44-fbe8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.135.72:44188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741416244, "uuid": "ba369e5e-fbe8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.185.51:49148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741416248, "uuid": "bc3ad2ee-fbe8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.16.161.250:60831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741416364, "uuid": "01b94fda-fbe9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.171:48259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741416548, "uuid": "6f0b3c65-fbe9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.64.157:56774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741416605, "uuid": "916196f6-fbe9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.88:34102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741416845, "uuid": "200d5573-fbea-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.21.86:57298/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417144, "uuid": "d2bb4ca8-fbea-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.228.73:54090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417206, "uuid": "f7b744b4-fbea-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.41.201:50774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417465, "uuid": "91fcf5a5-fbeb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.210:48943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417625, "uuid": "f12ead13-fbeb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.171:48259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741417864, "uuid": "7fdd5433-fbec-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.16.161.250:60831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418105, "uuid": "0f9a9e83-fbed-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.192.135:36453/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418285, "uuid": "7a5dc369-fbed-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.143.235:41320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418465, "uuid": "e6191507-fbed-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.15.244:55864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418706, "uuid": "759e50a4-fbee-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.40.253:48426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418765, "uuid": "98bff3ae-fbee-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.163.212:52105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741418945, "uuid": "03f90689-fbef-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.148.25:44836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741419185, "uuid": "9348c54b-fbef-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.21.86:57298/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741419364, "uuid": "fdd604aa-fbef-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.119.43:41358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741419426, "uuid": "2291c096-fbf0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.231.202:37803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741419663, "uuid": "b02a555e-fbf0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.143.235:41320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741419725, "uuid": "d4d6a037-fbf0-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.183.19:59200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741419798, "uuid": "003f2c11-fbf1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.24.17:59880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741419868, "uuid": "29fe0253-fbf1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.208.39:51199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741419966, "uuid": "644c29c6-fbf1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.puckerlinguist.shop/Siarhei_Korbut_-_Ice.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741420144, "uuid": "cecdf7e9-fbf1-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.183.19:59200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741420324, "uuid": "3a397e29-fbf2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.192.135:36453/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741420385, "uuid": "5e221c93-fbf2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.119.43:41358/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741420444, "uuid": "81c703d6-fbf2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.148.25:44836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741420445, "uuid": "8200cab4-fbf2-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.163.212:52105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741420883, "uuid": "86e48f49-fbf3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.222.67:38069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741421045, "uuid": "e7b5573b-fbf3-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.44.1:44502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741421245, "uuid": "5f28ec27-fbf4-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.54.105:60692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741421539, "uuid": "0e41d424-fbf5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.123.37:39955/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741421703, "uuid": "70179bb6-fbf5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:57814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741421705, "uuid": "712e11a6-fbf5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.24.17:59880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741421765, "uuid": "95140b1c-fbf5-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.159.75:37881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741421947, "uuid": "0116c829-fbf6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.233.16:59752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422124, "uuid": "6ae099b8-fbf6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.20.3:36509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422125, "uuid": "6b587948-fbf6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.125.147:45936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422246, "uuid": "b35ccf9c-fbf6-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.185.229:41275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422431, "uuid": "218cd0f1-fbf7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.128:39578/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422503, "uuid": "4c9065b1-fbf7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.31:59921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422786, "uuid": "f5821371-fbf7-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.37.208:46342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422964, "uuid": "5f749818-fbf8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.105.71:51183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741422964, "uuid": "5f839b59-fbf8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.28.9:41363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423143, "uuid": "ca5442ee-fbf8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:57814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423215, "uuid": "f53f272d-fbf8-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.218.254:41755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423385, "uuid": "5a397809-fbf9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.125.147:45936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423564, "uuid": "c5474a8a-fbf9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.30.177:50637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423566, "uuid": "c6138a36-fbf9-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.37.173:38911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423752, "uuid": "35003d2c-fbfa-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.88.204:54983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423807, "uuid": "55c016d7-fbfa-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.31:59921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741423924, "uuid": "9bee0048-fbfa-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.233.16:59752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424122, "uuid": "118436f9-fbfb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.39:53105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424168, "uuid": "2d1648ec-fbfb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.143.117:55096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424225, "uuid": "4efc47d6-fbfb-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.56.205.102:44126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424644, "uuid": "48bade34-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.66.164.175:34668/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424645, "uuid": "495aafe5-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.56:35070/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424673, "uuid": "5a13bde2-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.58.19:43625/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424673, "uuid": "5a1ac647-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.133:11609/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424673, "uuid": "5a63b006-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.133.71.121:4712/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424673, "uuid": "5a6af0b2-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.50.27:33544/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424674, "uuid": "5a844d65-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.0.23:46838/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424674, "uuid": "5a93c586-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.56.152:40117/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424690, "uuid": "640759d9-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.141.132:50490/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424705, "uuid": "6d85660a-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.64:34947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424763, "uuid": "8fc9f702-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.28.9:41363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741424944, "uuid": "fb92f19f-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.68.119:40753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425064, "uuid": "430ece31-fbfd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.46:34570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425245, "uuid": "af113dcf-fbfd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.37.173:38911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425246, "uuid": "af943460-fbfd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.88.204:54983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425305, "uuid": "d2bd9ccf-fbfd-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.86.143:32899/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425726, "uuid": "cd9ae4ee-fbfe-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.184.94:36470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741425965, "uuid": "5c41f83e-fbff-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.123.167:58695/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426025, "uuid": "802a83e1-fbff-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.154.81.64:35073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426087, "uuid": "a53f6339-fbff-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.203.186:44990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426162, "uuid": "d17e4f01-fbff-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.108.192:35121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426207, "uuid": "ec646909-fbff-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.68.119:40753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426265, "uuid": "0ee9a737-fc00-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.44.1:44502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426282, "uuid": "192a5697-fc00-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.51.59:46746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426386, "uuid": "575eac9d-fc00-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.105.71:51183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426386, "uuid": "575f2908-fc00-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.203.186:44990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426445, "uuid": "7a95f8b0-fc00-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.39.241:54697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426505, "uuid": "9e1a64fa-fc00-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.64:34947/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426624, "uuid": "e530d3b3-fc00-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.154.81.64:35073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426684, "uuid": "08b3e7b9-fc01-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.227.38:42731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741426804, "uuid": "5065d5a3-fc01-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.49.243:46071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741427044, "uuid": "df593f5e-fc01-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.205.71:60099/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741427046, "uuid": "e06ad80e-fc01-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.99.103:48531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741427061, "uuid": "e9ba6cc9-fc01-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.107.3:38783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741427165, "uuid": "27affb1d-fc02-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.drizzleraving.shop/Siarhei_Korbut_-_Diligent.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741427290, "uuid": "71f1d178-fc02-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.58.72:33241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741427404, "uuid": "b5ea4766-fc02-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.86.143:32899/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741427707, "uuid": "6a73eef3-fc03-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.227.218:60297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741427885, "uuid": "d478836a-fc03-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.4.88:33782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741427896, "uuid": "db5b5b8a-fc03-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.99.52:43317/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741427945, "uuid": "f8741182-fc03-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.70.211:34523/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741428005, "uuid": "1c1afda8-fc04-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.47.26:51372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741428125, "uuid": "63730790-fc04-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.89.206.72:55330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741428424, "uuid": "1602f494-fc05-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.39.241:54697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741428425, "uuid": "1664c7c6-fc05-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.159.90:56591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741428784, "uuid": "ec56cdcb-fc05-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.70.211:34523/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741428785, "uuid": "ed688eb3-fc05-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.107.3:38783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741428862, "uuid": "1b4c0391-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.172.230:60249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429026, "uuid": "7cba86e2-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.91.33.211:56838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429144, "uuid": "c2ff0d3b-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/run.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429205, "uuid": "e7ab977c-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/ohshit.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429205, "uuid": "e7bd4547-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/main_sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "e7cc105c-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/main_arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "e7edfa63-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/main_mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "e7f74fc5-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/main_x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "e7fbc3a3-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/main_arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "e844c94e-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/main_ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "e8517234-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "e851905d-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/main_x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "e8521f89-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/main_arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429206, "uuid": "e859dead-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.108.192:35121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429207, "uuid": "e8704929-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/main_mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429207, "uuid": "e87a8dd0-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/main_arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429207, "uuid": "e89fb262-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429207, "uuid": "e8ea614b-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429208, "uuid": "e9180d82-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.12.94.10/main_m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429208, "uuid": "e92dee9d-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429208, "uuid": "e94cbd17-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429208, "uuid": "e94cc852-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429208, "uuid": "e94febc5-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429208, "uuid": "e954d65b-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429208, "uuid": "e95e52ed-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429208, "uuid": "e95e535f-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429209, "uuid": "e9c4817b-fc06-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429264, "uuid": "0ac0f2ad-fc07-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/run.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429264, "uuid": "0ad3b371-fc07-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet1.uapworx1.sbs/ohshit.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429385, "uuid": "52def047-fc07-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.75/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429511, "uuid": "9db2e798-fc07-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.4.88:33782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429566, "uuid": "be6656eb-fc07-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.124.19:36018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741429925, "uuid": "94763e8d-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.89.206.72:55330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430044, "uuid": "dbbe29d6-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.74/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430044, "uuid": "dbc358eb-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.210/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430044, "uuid": "dbc3679c-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.50/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430044, "uuid": "dbd22d2a-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.54/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430045, "uuid": "dc4226c9-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.78/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430045, "uuid": "dc429708-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.74/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430046, "uuid": "dcb9096a-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.210/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430046, "uuid": "dcd9dc7f-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.148.220.87:57148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430048, "uuid": "ddcf443f-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.50/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430048, "uuid": "de0628f0-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.54/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430049, "uuid": "de94066f-fc08-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.211/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "0063848a-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.74/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "0063ee30-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.78/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "00649693-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.210/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "00824014-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.78/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "00824d33-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.78/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "00824e57-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.210/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "0084c182-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.211/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "008832eb-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.211/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "0095e996-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.54/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "00963ea3-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.50/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "00991ebb-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.78/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "009b2fb1-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.211/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "009be0a1-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.50/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "009dd5d6-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.54/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "009fc392-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.211/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "00a1f812-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.210/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "00a209b2-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.50/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "00a215ed-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.74/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430106, "uuid": "00b81783-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.54/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430107, "uuid": "00e06dab-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://y.shavsl.com/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430107, "uuid": "01038ddf-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.74/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430107, "uuid": "011d0bf4-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://y.shavsl.com/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430107, "uuid": "012c46b3-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://y.shavsl.com/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430109, "uuid": "02105075-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://y.shavsl.com/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430163, "uuid": "22b761d2-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.32.212/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430164, "uuid": "22c74d9b-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.214/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430164, "uuid": "22cf8270-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.212/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430224, "uuid": "470e2475-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.214/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430224, "uuid": "470e38a7-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.212/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430224, "uuid": "470e3b8f-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.212/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430224, "uuid": "4712ce0b-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.214/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430225, "uuid": "47367417-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.214/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430225, "uuid": "473c1ecf-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.212/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430225, "uuid": "473c32d8-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.32.212/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430225, "uuid": "473ffb13-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.32.212/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430225, "uuid": "47820dca-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.32.212/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430225, "uuid": "479d7209-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.32.212/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430226, "uuid": "47e4c95c-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.212/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430232, "uuid": "4b835e5c-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.42.214/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430284, "uuid": "6a9606b3-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.58.72:33241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430525, "uuid": "fa678a96-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.129.85:44117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430525, "uuid": "fa884f27-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.147.155:50712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430527, "uuid": "fb42fb9d-fc09-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.whined.org/t1t1t1t1t1.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430585, "uuid": "1df48f2b-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://x.0.feedback/uh_uh+uh", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430672, "uuid": "520d15f8-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.139.150:48322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430703, "uuid": "6488a7c2-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.70.243:56896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430733, "uuid": "75ee7f89-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.237:33979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430767, "uuid": "8a5daedb-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.8.88:9190/test.woff", "Tag": [ { "name": "Donut", "colour": "#38b838", "exportable": true, "hide_tag": false }, { "name": "DonutInjector", "colour": "#be18d9", "exportable": true, "hide_tag": false }, { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430885, "uuid": "d0b2b401-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.76/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430885, "uuid": "d1001067-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.153.223:52076/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430888, "uuid": "d28b5527-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.51/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430944, "uuid": "f3d3d656-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.76/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430944, "uuid": "f3ded91a-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.76/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430944, "uuid": "f3eac35a-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.51/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430944, "uuid": "f3ecf419-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.76/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430944, "uuid": "f3f65a29-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.76/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430944, "uuid": "f4093ec9-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.51/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430944, "uuid": "f40eeade-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.51/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741430944, "uuid": "f4159a5e-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.186.12.51/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431004, "uuid": "179bff49-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.75/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431005, "uuid": "182ecf85-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.240.129:43541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431033, "uuid": "28d26cdd-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.99.52:43317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431064, "uuid": "3b4276ff-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.75/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431064, "uuid": "3b432edb-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.75/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431064, "uuid": "3bb693dc-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://z.shavsl.com/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431064, "uuid": "3bb761a0-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://z.shavsl.com/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431066, "uuid": "3c90f2dd-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://z.shavsl.com/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431075, "uuid": "42540849-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://z.shavsl.com/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431124, "uuid": "5f0e6ba5-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.167.34.75/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431148, "uuid": "6dae4704-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.133.157:49458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431244, "uuid": "a6bc1cd2-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://w.shavsl.com/gif", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431244, "uuid": "a6c0da7a-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://w.shavsl.com/b", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431245, "uuid": "a7a95869-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://w.shavsl.com/c", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431246, "uuid": "a7d2454d-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://w.shavsl.com/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431247, "uuid": "a874fe3f-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.5.165:48948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431262, "uuid": "b19d98a5-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://w.shavsl.com/miner", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431378, "uuid": "f6614805-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.150:58918/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7ef868c0-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7ef9cfb8-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7ef9d2fa-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7ef9d469-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7ef9d96a-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7ef9d9d7-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7ef9de12-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7ef9e479-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7efa515d-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7f0484a2-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7f048742-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741431607, "uuid": "7f0e5105-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.177.18/bins/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741432024, "uuid": "77bf6231-fc0d-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.47.26:51372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741432024, "uuid": "77fa7637-fc0d-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.133.157:49458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741432263, "uuid": "0669fe60-fc0e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.153.223:52076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741432384, "uuid": "4e39041d-fc0e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.240.129:43541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741432504, "uuid": "95d0962e-fc0e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.129.85:44117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741432565, "uuid": "ba0347e7-fc0e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.5.165:48948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741432685, "uuid": "01e4becf-fc0f-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.150:58918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741432805, "uuid": "495e25e3-fc0f-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.138.133:60441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741432865, "uuid": "6d30467f-fc0f-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.235.123:36041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741433313, "uuid": "784eb2f7-fc10-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.239.143.27:60910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741433708, "uuid": "63981888-fc11-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.254:33424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741433884, "uuid": "cc68a797-fc11-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.138.133:60441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741434125, "uuid": "5c1ed424-fc12-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.235.123:36041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741434845, "uuid": "0906166d-fc14-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.89.88:43383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741434853, "uuid": "0dcef088-fc14-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.181.162:46517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741434964, "uuid": "5040c451-fc14-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.181.162:46517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435263, "uuid": "020c12a0-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.217.68:50586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435264, "uuid": "02fb699a-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.21.167:40894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435324, "uuid": "26c97f1d-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.254:33424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435384, "uuid": "4a69655b-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.84.33:54293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435448, "uuid": "70dc60d7-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.106.89:37201/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435450, "uuid": "71bf1ae4-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.137.125:51428/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435450, "uuid": "71eb0358-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.5.167:59237/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435460, "uuid": "77fe6389-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.247.54.193:55696/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435477, "uuid": "81c02ada-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.119:10007/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435477, "uuid": "820e6c1e-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.57.0.149:45389/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435477, "uuid": "821014b7-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.175.180.110:40707/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435478, "uuid": "822ab18a-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.250.158:10630/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435478, "uuid": "822b2d5e-fc15-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.249.169:11252/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741435744, "uuid": "211d055f-fc16-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.222.119:58023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741436284, "uuid": "62f3d58b-fc17-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.228.73:54090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741436584, "uuid": "15f82a34-fc18-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.89.88:43383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741436644, "uuid": "399d68b6-fc18-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.21.167:40894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741436669, "uuid": "48227c03-fc18-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.189.231:43149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741436885, "uuid": "c8ead424-fc18-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.87.119:54196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741437984, "uuid": "580090b5-fc1b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.80.87:33954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741438089, "uuid": "96b2528d-fc1b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.120.149:48497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741438146, "uuid": "b87313c4-fc1b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.245.82:24489/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741438325, "uuid": "235fcea3-fc1c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.189.231:43149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741438564, "uuid": "b1a36210-fc1c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.46.68:41190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741438564, "uuid": "b1e4a13f-fc1c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.166.136:37290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741438746, "uuid": "1e319b47-fc1d-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.51.12:38667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741438806, "uuid": "4248b082-fc1d-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.167.202.161:38160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741438863, "uuid": "6412295b-fc1d-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.87.119:54196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741439167, "uuid": "19853788-fc1e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.80.87:33954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741439225, "uuid": "3bd7dab1-fc1e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.251.76:42829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741439285, "uuid": "5f7b3b8f-fc1e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.71.86:42836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741439944, "uuid": "e86bdce7-fc1f-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.25.93:57161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741439944, "uuid": "e8a810e5-fc1f-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.227.218:60297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440006, "uuid": "0d4bd62c-fc20-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.172.242:34038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440017, "uuid": "13b9e817-fc20-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.185.117:39430/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440064, "uuid": "301e7792-fc20-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.115.52:60566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440124, "uuid": "53f8ce9b-fc20-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.251.76:42829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440125, "uuid": "543c90ae-fc20-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.239.228:57497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440305, "uuid": "bf6ac4b5-fc20-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.80.152:52878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440364, "uuid": "e2b420f0-fc20-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.151.147:54907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440427, "uuid": "082b66cd-fc21-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.0.190:41610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440784, "uuid": "dd07e409-fc21-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.71.86:42836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741440907, "uuid": "2687b7a6-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://farmagrupodw.com/temp/Elated.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441086, "uuid": "91208c72-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.0.121:43506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441148, "uuid": "b64f295f-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://charmdelights.shop/julab.m4a", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441162, "uuid": "be9ee2e0-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.17.244:50412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "fd54ce38-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/fyzebgcilgcapx7/sepiu.wav/file", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "fd54d2ff-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/9hr4d1ue3froxkc/Vshgbjlzor.mp3/file", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "fd59e5dd-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://farmagrupodw.com/temp/pica.bin", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "fd64bcc0-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/2yr3und23dtjqd8/Qpggxctey.vdf/file", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "fd64bcc4-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/tvp04d3t8v7xgo7/hsdwswa.mp3/file", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441268, "uuid": "fd8cd06c-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://farmagrupodw.com/temp/Registry.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441269, "uuid": "fe4b27a3-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/0biw8p6gk849oy0/kjzninsj.mp3/file", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441269, "uuid": "fe6f32b2-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/8pu8gc281skus34/Ihtojwmztzy.wav/file", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441270, "uuid": "feb0e04f-fc22-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/174i9ezu25i36ac/zxia.mp3/file", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441627, "uuid": "d3a8abc1-fc23-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://x5.eioae.shop/17f9c91b5a59bdf35c05b9d1a24f18f6467247cda6cf0b27.wbk", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441686, "uuid": "f6d5163c-fc23-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.25.93:57161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441774, "uuid": "2ae0094a-fc24-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.239.228:57497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441805, "uuid": "3d9df193-fc24-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.172.242:34038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741441864, "uuid": "60f762e7-fc24-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.7.103:33200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442163, "uuid": "135045f4-fc25-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.80.152:52878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442224, "uuid": "37648e8b-fc25-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.152.67:41887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442285, "uuid": "5bf8518a-fc25-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.151.147:54907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442525, "uuid": "ea7feb69-fc25-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.106.72:33765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442526, "uuid": "eb98171b-fc25-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.173.230:58026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442645, "uuid": "3277cc09-fc26-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.0.121:43506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442766, "uuid": "7a41e6b6-fc26-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.173.230:58026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741442884, "uuid": "c0f98975-fc26-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.106.72:33765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443124, "uuid": "5008c366-fc27-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.222.119:58023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443306, "uuid": "bc3ed99b-fc27-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.157.8:43582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443424, "uuid": "02eadd1d-fc28-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.7.103:33200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443426, "uuid": "03bef83f-fc28-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://objectstorage.ap-singapore-2.oraclecloud.com/n/ax4mqlu25efi/b/zordarruba/o/tozemenia-pass-step.html", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443426, "uuid": "03d5d85e-fc28-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://objectstorage.ap-singapore-2.oraclecloud.com/n/ax4mqlu25efi/b/lakmewbkt/o/fetch-page-loading-next.html", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443427, "uuid": "04553862-fc28-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://cariz.shop/junkypool.mp3", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "FakeMP3", "colour": "#0b0292", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443427, "uuid": "04b11871-fc28-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://x72.eioae.shop/413a42a4c715693c37e5256e144fd76cc51160b74617024d.xll", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "FakeXLL", "colour": "#b147fe", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443428, "uuid": "0536482a-fc28-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://refereng.shop/tozemeniaclo.mp3", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "FakeMP3", "colour": "#0b0292", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443430, "uuid": "065c708c-fc28-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/oe7knozj2q5s45p/libskottie.bin/file", "Tag": [ { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#04280F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443485, "uuid": "27317dad-fc28-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.152.67:41887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443487, "uuid": "2827eb38-fc28-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.178.121:54937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443493, "uuid": "2c0ef4fd-fc28-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://arch1.usa1news.buzz/s/mirror/mNuFgfJgBDBr9i7DSdfRjuBx/file.zip", "Tag": [ { "name": "7z", "colour": "#f91abd", "exportable": true, "hide_tag": false }, { "name": "autoit", "colour": "#d51534", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741443503, "uuid": "31c969a9-fc28-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.79:35582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741444027, "uuid": "6a1cfd29-fc29-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.92.254:47649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741444926, "uuid": "820aae93-fc2b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.178.121:54937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741445105, "uuid": "ecacdce1-fc2b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.240:44480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741445284, "uuid": "57953e43-fc2c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.246.244:57008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741445769, "uuid": "78849061-fc2d-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.23.54:36234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741445827, "uuid": "9adbad5a-fc2d-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.96.245:38762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446063, "uuid": "27e53349-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.98.69:53776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446183, "uuid": "6f33d6c1-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.18.38:55674/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446189, "uuid": "72706e12-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.105.107:38920/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446202, "uuid": "7aa16892-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.35.82:49980/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446213, "uuid": "80eba9b1-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.21.160.69:34360/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446213, "uuid": "80ee973e-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.217.23.59:33446/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446213, "uuid": "814f1ed6-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.48.66.188:44155/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446214, "uuid": "815f0610-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.156.200:36231/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446305, "uuid": "b7c80fab-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.12.5:54306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446505, "uuid": "2f4a4fc7-fc2f-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.165.159:34917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446663, "uuid": "8d6a1ac5-fc2f-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.23.54:36234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446845, "uuid": "f9e72c1a-fc2f-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.137.77:59984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741446904, "uuid": "1d06d649-fc30-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.71.252:49753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741447205, "uuid": "d0640bae-fc30-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.240:44480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741447383, "uuid": "3a85a4e8-fc31-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.235.131.151:41654/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741447564, "uuid": "a6108bc8-fc31-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.235.21:43964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741447582, "uuid": "b105ae9b-fc31-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.71.211:59945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741447625, "uuid": "cab5ba25-fc31-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.216.90:57477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741447748, "uuid": "13e58894-fc32-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.243.134:58292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741447989, "uuid": "a3db0dc7-fc32-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.71.252:49753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448464, "uuid": "befed8b3-fc33-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.42.115:49408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448465, "uuid": "bf5008e2-fc33-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.74.195:7297/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741448707, "uuid": "4f875d40-fc34-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.96.245:38762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741449365, "uuid": "d7c54ed3-fc35-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.246.73:51769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741449424, "uuid": "fb13ee34-fc35-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.42.115:49408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741449665, "uuid": "8a75aa53-fc36-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.41.247:37033/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741449665, "uuid": "8aadf5fe-fc36-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.41.47.96:58868/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741450085, "uuid": "8522ebf1-fc37-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.243.134:58292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741450155, "uuid": "ae93e750-fc37-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.41.47.96:58868/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741450385, "uuid": "37e38510-fc38-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.64.190:45036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741450387, "uuid": "38ede530-fc38-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.8.27:53802/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741450504, "uuid": "7ee01355-fc38-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.24.21:57059/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741450745, "uuid": "0e0d08d4-fc39-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.216.90:57477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741450863, "uuid": "5483dd83-fc39-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.30.198:56535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741451286, "uuid": "50a38a22-fc3a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.8.27:53802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741451406, "uuid": "98378c4a-fc3a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.30.225:34083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741451465, "uuid": "bb5925ef-fc3a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.51.242:60371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741451885, "uuid": "b59e04b7-fc3b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.208.54:50612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741451945, "uuid": "d96102c7-fc3b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.64.190:45036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741452124, "uuid": "44167007-fc3c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.30.225:34083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741452124, "uuid": "442258a3-fc3c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.157.8:43582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741452545, "uuid": "3f06d7c4-fc3d-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.30.198:56535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741453509, "uuid": "7dbf1945-fc3f-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.51.242:60371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741454227, "uuid": "297ec0cc-fc41-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.160.114:34814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741454586, "uuid": "ff7a2de0-fc41-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.155.152:47765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741455180, "uuid": "61e92c80-fc43-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.52.21:57616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741455633, "uuid": "6fec20da-fc44-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.48.59.72:41343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741456340, "uuid": "156f0eb5-fc46-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.81:49990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741456834, "uuid": "3b948b2b-fc47-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.174.86:34369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457014, "uuid": "a6cdb0ff-fc47-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.147:10734/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457014, "uuid": "a6cdcb3e-fc47-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.38.0.26:37734/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457014, "uuid": "a6cdeb64-fc47-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.197:11174/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457014, "uuid": "a6cdf09d-fc47-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.251.120:10922/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457014, "uuid": "a70a1ed5-fc47-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.146:10316/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457014, "uuid": "a7149071-fc47-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.21.160.32:43163/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457014, "uuid": "a714b76d-fc47-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.12.1:58980/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457015, "uuid": "a7439144-fc47-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.102.189.4:55406/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457030, "uuid": "b0461421-fc47-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.49.33:36686/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457253, "uuid": "357ef8eb-fc48-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.144.253:55679/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457553, "uuid": "e7fe105c-fc48-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.228.167:38045/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457793, "uuid": "771dd475-fc49-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.118.163:51773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457913, "uuid": "be773c85-fc49-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.118.163:51773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741457924, "uuid": "c5330b6b-fc49-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.17.99:50018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741458094, "uuid": "2ab6aaed-fc4a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.137.252:37089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741458334, "uuid": "b9d034c0-fc4a-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.152.94.110:51901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741458453, "uuid": "00ac7077-fc4b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.152.94.110:51901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741458762, "uuid": "b8a19129-fc4b-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.131.111:33738/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741459475, "uuid": "61b64916-fc4d-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.79:32977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741459893, "uuid": "5b0dbfbb-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.160.114:34814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741460013, "uuid": "a2604cd6-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.40.114:38487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741460163, "uuid": "fbcc679a-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://authenticatior.com/Client32.ini", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741460164, "uuid": "fc46b63f-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://certified-doc.com/", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakeupdates", "colour": "#3d364c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741460166, "uuid": "fd7e3a00-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://authenticatior.com/NSM.lic", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741460193, "uuid": "0d9d2c4c-fc4f-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.236.90:45402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741460832, "uuid": "8ac10367-fc50-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.197.217:42951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741461154, "uuid": "4abab962-fc51-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://d2977hsylpr9n2.cloudfront.net/YO_3316_23.apk?ExpireTime=1741447083", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Triada", "colour": "#454195", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741461453, "uuid": "fceaf709-fc51-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.217.122.48:38162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741461467, "uuid": "04f0b2dd-fc52-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://authenticatior.com/vrep.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741461573, "uuid": "444ce826-fc52-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.217.122.48:38162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741461693, "uuid": "8c09436d-fc52-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.228.230:34438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741461693, "uuid": "8c10f371-fc52-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.120.46:47938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741461934, "uuid": "1b3550ed-fc53-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.76.39:57149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741462353, "uuid": "15307407-fc54-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.166.246:46433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741463253, "uuid": "2d67748e-fc56-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.210.8.43:57532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741463517, "uuid": "caebc007-fc56-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "https://d2977hsylpr9n2.cloudfront.net/FM_3313_25.apk?ExpireTime=1741447113", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Triada", "colour": "#454195", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741463855, "uuid": "9489f3d4-fc57-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.72.223:44631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741464453, "uuid": "f8a96c9f-fc58-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.3.117:39190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741464530, "uuid": "26a4fa00-fc59-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.59.223:53135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741464754, "uuid": "ac195fc0-fc59-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.232.168:48841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741464754, "uuid": "ac19c72b-fc59-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.232.168:48841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741465835, "uuid": "30e2be29-fc5c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.205.12:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741466133, "uuid": "e2685b1f-fc5c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.51.203:55032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741466176, "uuid": "fbe71fcf-fc5c-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.51.203:55032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741466211, "uuid": "107c5d0b-fc5d-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.6.76.139:26550/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741466614, "uuid": "00ecb6fb-fc5e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.213.203:48846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741466854, "uuid": "90248ff8-fc5e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.181.186:56983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741466885, "uuid": "a236e4ea-fc5e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://58ff574.na3.to/cake/setup1549.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741466919, "uuid": "b6e6f298-fc5e-11ef-aa53-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.181.186:56983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741467333, "uuid": "ad72b441-fc5f-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.239:6697/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741467753, "uuid": "a7d6a654-fc60-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://34.85.195.5:8080/doc/Document-BU110526045.lnk", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741467842, "uuid": "dd0fcd98-fc60-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.140:39869/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741467845, "uuid": "debf1a2a-fc60-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.242:60789/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741467872, "uuid": "eeef5d68-fc60-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.21.160.132:33098/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741467872, "uuid": "ef06f603-fc60-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.251.76:42829/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741467872, "uuid": "ef156ffe-fc60-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.10:10762/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741467934, "uuid": "1389efeb-fc61-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.167.175.167:34134/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741467935, "uuid": "14250a9a-fc61-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.139:52075/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741467935, "uuid": "142bd464-fc61-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.0.198:33717/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468065, "uuid": "621464a5-fc61-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/microsoftingsoftwares/faw/downloads/Barfaser.exe", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468076, "uuid": "68ab0a3b-fc61-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.241.146.170:40972/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468119, "uuid": "82033472-fc61-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.177.151:36899/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468234, "uuid": "c6aab08c-fc61-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/microsoftingsoftwares/faw/downloads/gribto2.exe", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468472, "uuid": "549d1a96-fc62-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.236.90:45402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468473, "uuid": "54cdeb21-fc62-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.189.18.118:2083/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468480, "uuid": "58f4d79b-fc62-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.160.171.230:1244/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468504, "uuid": "67685700-fc62-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://34.85.195.5:8080/cake/setup1549.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468542, "uuid": "7e41836b-fc62-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.44.219.8:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468574, "uuid": "915b7728-fc62-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.213.203:48846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468737, "uuid": "f29d9b85-fc62-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.107.180:48351/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741468833, "uuid": "2b58c623-fc63-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.3.117:39190/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741469015, "uuid": "9840ec37-fc63-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.65.141:50335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741469271, "uuid": "30a7823e-fc64-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.188.6:48817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741469434, "uuid": "9196a259-fc64-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://pub.goblinzone.xyz/Downloads/Documents/Marketing%20Info.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741469613, "uuid": "fc79b172-fc64-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.131.70.0:5986/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741469734, "uuid": "44960611-fc65-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.135.24:56761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741469805, "uuid": "6ebe5a6b-fc65-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.juxoi.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741470091, "uuid": "191fa867-fc66-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.36.221:39183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741470187, "uuid": "529d39b7-fc66-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.213:55217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741470188, "uuid": "5304a171-fc66-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.213:55217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741470189, "uuid": "53bd7ee5-fc66-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.36.221:39183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741470213, "uuid": "6213c83d-fc66-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.79:32977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471014, "uuid": "3fa0dc43-fc68-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.55.164:34468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471276, "uuid": "dc012b99-fc68-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.217.117.110:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471958, "uuid": "725bc55b-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.65.26.56:8002/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471959, "uuid": "729fa303-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.20.230.95:27178/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471959, "uuid": "72a6e901-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.230.108:51055/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471960, "uuid": "73699631-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.35.98:40160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471960, "uuid": "7369f10a-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.172.129.105:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471960, "uuid": "737ed4c7-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.237.201:41571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471960, "uuid": "73ac4e25-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.68.108:8084/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471961, "uuid": "73cb9318-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.204.91.157:28080/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471963, "uuid": "751fc22b-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.55.164:34468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471963, "uuid": "7528fa77-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.36.198:41082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471963, "uuid": "7531f030-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.7.94:45997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471963, "uuid": "7568cf5c-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.213.155:48990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471964, "uuid": "75a43476-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.12.23:38372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471964, "uuid": "75eb9a8c-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.241.165.210:6713/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471965, "uuid": "763b50dd-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.237.194.158:11300/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471975, "uuid": "7c8d4057-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.35.98:40160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471984, "uuid": "81ed186b-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.27.208.153:17028/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471986, "uuid": "82b5a5c0-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://58ff574.na3.to/doc/Document-BU110526045.lnk", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471986, "uuid": "82b980da-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.27.96:33454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471986, "uuid": "82eb8eb8-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.89:38041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471986, "uuid": "8311ac5b-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.27.50:51608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471986, "uuid": "8323c40b-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.13.207:48530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471986, "uuid": "832a27e2-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.213.155:48990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471986, "uuid": "832c06a2-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.168.219:35284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "833e2e2c-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.145.59:46408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "833e9305-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.36.198:41082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "834636d2-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.109.227.67:5013/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "834929ef-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.217.68:50586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "83537412-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/microsoftingsoftwares/faw/downloads/Arefaso.exe", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "8356fb73-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.77.169:56206/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "8373f78a-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.74.189:41755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "83746dee-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.220.164:45285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "83746e4e-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.69.43:45358/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "8375430e-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.69.43:45358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "83787201-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.3.73:52437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "837e4056-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.99.73.141:16680/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "83851cde-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.213.27:55797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "83858237-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.26.105:33546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "8386476c-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.135.24:56761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "83891a3f-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.71.118.190:51612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "838c0b4a-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.79.254:38545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "839526e6-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.144.100:51849/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "839a75e8-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.238.11:55108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "839c2f78-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.32.84:44045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471987, "uuid": "839e8de7-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.117.28:36312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471988, "uuid": "83f9e2c4-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.238.11:55108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471988, "uuid": "841761b4-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.21.124:34265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741471988, "uuid": "842fe648-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.206.211.242:50005/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472045, "uuid": "a6542b36-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.237.201:41571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472046, "uuid": "a6bb3c85-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.162.97.222:16919/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472047, "uuid": "a71ed610-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.7.94:45997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472047, "uuid": "a72498c6-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.223.86:57247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472047, "uuid": "a767aa13-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.77.169:56206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472047, "uuid": "a7697da1-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.53.93:39104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472047, "uuid": "a769d5ff-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.109.227.66:5013/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a79584f9-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.250.143:42592/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a796cac2-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.250.143:42592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a79731f2-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.145.59:46408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a7a3ad09-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.9.203:49645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a7a4f130-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.175.212:38182/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a7ae611f-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.35.36.175:22680/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a7f9f050-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.159.93/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a7fa1e8c-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.97.9:33241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a7fa374d-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.68.139:48460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a8076422-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.68.108:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a808420d-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.68.139:48460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a80d937c-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.174.141:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a810801d-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.37.139:47616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a810993d-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.37.139:47616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472048, "uuid": "a8252ac3-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.129.254:55927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a8321a0f-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.84.128:35323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a83579df-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.90.213:58712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a85927fe-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.68.108:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a8595ab0-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.76.192:51434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a86af063-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.76.192:51434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a8762f82-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.5.216.8:8001/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a87a69ac-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.129.228:56212/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a87a76da-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.79.254:38545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a88186fa-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.49.126.169/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a884b4f8-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.121.48:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a8894415-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.49.126.169:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472049, "uuid": "a8931efb-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.144.100:51849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472050, "uuid": "a8edaa57-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.122.233:38513/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472050, "uuid": "a910510d-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.68.108:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472050, "uuid": "a94cab6e-fc6a-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.drizzleraving.shop/Siarhei_Korbut_-_Overpay.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741472885, "uuid": "9ab1eb65-fc6c-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.146.181:47731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741473244, "uuid": "70746c58-fc6d-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.157.141/pty4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741473664, "uuid": "6b3909df-fc6e-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.153.97:34405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741473802, "uuid": "bd1b1ce7-fc6e-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.181.131:54701/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741473905, "uuid": "fafc1247-fc6e-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.35.166:35908/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741474628, "uuid": "a99e5f85-fc70-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.139.54:46836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741474805, "uuid": "133eca0a-fc71-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.153.97:34405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741474834, "uuid": "243c4fb6-fc71-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.250.21.14:56007/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741475063, "uuid": "acdce20a-fc71-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.174.152:55914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741475468, "uuid": "9e2b1009-fc72-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.drizzleraving.shop/Siarhei_Korbut_-_Grant.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741475886, "uuid": "97445af5-fc73-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.111.79:33266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741475945, "uuid": "ba8d2449-fc73-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.225.5:40651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741476246, "uuid": "6df2a386-fc74-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.141:43824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741476504, "uuid": "0799f9b4-fc75-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.116.227:46971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741476606, "uuid": "44717c20-fc75-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.146.181:47731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741476725, "uuid": "8bd6b560-fc75-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.138.50:38279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741476726, "uuid": "8c0ff66f-fc75-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.120.189:44640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741476861, "uuid": "dca69c73-fc75-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.187:40896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741476904, "uuid": "f68785c5-fc75-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.138.117:38541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741477025, "uuid": "3ea10e68-fc76-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.208.111.100:58489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741477205, "uuid": "a9a984fc-fc76-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.141:43824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741477265, "uuid": "cd336b53-fc76-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.207.163:51983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741477266, "uuid": "cdd97483-fc76-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.187:40896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741477325, "uuid": "f0fdfd5a-fc76-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.190.232:60849/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741477444, "uuid": "38316360-fc77-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.111.79:33266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741477444, "uuid": "383e806f-fc77-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.225.5:40651/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741477746, "uuid": "ebf6d216-fc77-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.72.136:52753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741477984, "uuid": "7a1f8bed-fc78-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.55.32:48217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741478060, "uuid": "a776f247-fc78-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.144.129:55466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741478105, "uuid": "c1fa10ca-fc78-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.138.50:38279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741478133, "uuid": "d2fe78e2-fc78-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.200.168:36120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741478224, "uuid": "093406ae-fc79-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.120.189:44640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741478226, "uuid": "0a6ad7d2-fc79-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.155.53:53667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741478285, "uuid": "2d7a8c44-fc79-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.208.111.100:58489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741478286, "uuid": "2dd2efe8-fc79-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.72.193:38590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1741478287, "uuid": "2e763157-fc79-11ef-9f33-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.237.74:53026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424222, "uuid": "4d841841-fbfb-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.56.205.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741395242, "uuid": "d413db35-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.69.248.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741398603, "uuid": "a73aeca5-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.124.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402983, "uuid": "d9d3b5f2-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.68.56.159", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413784, "uuid": "00035848-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.159.45.164", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa328f22-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.161.230.108", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467903, "uuid": "017d029e-fc61-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.167.175.167", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741435447, "uuid": "6fcd304a-fc15-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.175.180.110", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741435447, "uuid": "6fcaeccb-fc15-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.247.54.193", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413784, "uuid": "00044c54-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.48.66.171", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741446183, "uuid": "6efff227-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.48.66.188", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741403042, "uuid": "fd2955c1-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.48.66.237", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449661, "uuid": "8862d95b-fc36-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.41.47.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741435447, "uuid": "6fcd3a7c-fc15-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.57.0.149", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430162, "uuid": "21cd8fc1-fc09-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.167.32.212", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430043, "uuid": "dac182f3-fc08-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.167.34.74", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429382, "uuid": "51190a60-fc07-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.167.34.75", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430883, "uuid": "cf5b1c01-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.167.34.76", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430043, "uuid": "dac1839b-fc08-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.167.34.78", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430043, "uuid": "dac2255d-fc08-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.167.42.210", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430043, "uuid": "dac15cbe-fc08-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.167.42.211", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430162, "uuid": "21cd8ba7-fc09-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.167.42.212", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430162, "uuid": "21cd98f0-fc09-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.167.42.214", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741473242, "uuid": "6f858064-fc6d-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.172.157.141", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456984, "uuid": "94c900b0-fc47-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.12.1", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741438142, "uuid": "b6812f47-fc1b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.245.82", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741403283, "uuid": "8c7fcacf-fbca-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.183.29.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741451462, "uuid": "b9b06893-fc3a-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.183.51.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424643, "uuid": "481174ae-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.133.71.121", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741476483, "uuid": "fb3bdac7-fc74-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.116.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741426143, "uuid": "c63b5893-fbff-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.108.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424643, "uuid": "481c61a2-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.141.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465805, "uuid": "1eb5ef8a-fc5c-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.26.239", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741403462, "uuid": "f7b80c13-fbca-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.25.131.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741457882, "uuid": "ac5c8b40-fc49-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.27.35.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413784, "uuid": "0003ab77-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.209.79.238", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392242, "uuid": "d80243a8-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.153.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741427882, "uuid": "d3022dca-fc03-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.4.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741433703, "uuid": "60ae1fcb-fc11-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.26.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425723, "uuid": "cc19de68-fbfe-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.184.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741398663, "uuid": "cae07ba5-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.226.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741448462, "uuid": "bd75c757-fc33-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.42.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441862, "uuid": "5f93a51a-fc24-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.7.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741416122, "uuid": "71ad52b0-fbe8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.223.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741460703, "uuid": "3d6fb7ac-fc50-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.97.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741394823, "uuid": "d9e7a63e-fbb6-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.104.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467903, "uuid": "017cf0f8-fc61-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.117.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430523, "uuid": "f8f1a414-fc09-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.129.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741435261, "uuid": "0101d04e-fc15-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.21.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741463462, "uuid": "aa645fb0-fc56-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.238.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741459323, "uuid": "07332475-fc4d-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.51.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418762, "uuid": "96fad9a4-fbee-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.163.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741462683, "uuid": "d9b878cc-fc54-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.181.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399863, "uuid": "95ffa3fb-fbc2-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.110.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741440303, "uuid": "be32de39-fc20-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.80.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741398422, "uuid": "3b94451b-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.82.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399083, "uuid": "c52d7bce-fbc0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.8.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413784, "uuid": "00045012-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.86.107", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402983, "uuid": "d9d3d5b1-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.86.154", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741412162, "uuid": "38f0eb3c-fbdf-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.211.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741421042, "uuid": "e60ec2bb-fbf3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.44.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741445283, "uuid": "56948733-fc2c-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.246.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741426262, "uuid": "0d93f4a9-fc00-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.51.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741435742, "uuid": "20108a2d-fc16-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.222.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392242, "uuid": "d8026a74-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.35.107", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741421523, "uuid": "047b399c-fbf5-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.123.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402983, "uuid": "d9d3ed89-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.134.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741454223, "uuid": "2736288d-fc41-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.160.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741462201, "uuid": "bade4e04-fc53-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.166.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741442523, "uuid": "e97a5f1b-fc25-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.173.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741434842, "uuid": "0782675f-fc14-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.181.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410782, "uuid": "02c76848-fbdc-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.190.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467842, "uuid": "dce50d0c-fc60-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.11.242", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741398422, "uuid": "3b945476-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.15.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741475042, "uuid": "a0869713-fc71-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.174.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741454583, "uuid": "fdec3b6e-fc41-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.155.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741421763, "uuid": "93a10aff-fbf5-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.159.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392242, "uuid": "d8022dc5-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.94.254", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456984, "uuid": "94c8b4ac-fc47-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.144.253", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741458003, "uuid": "f424c146-fc49-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.145.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430523, "uuid": "f8f1a77d-fc09-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.147.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741397282, "uuid": "941d5709-fbbc-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.165.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741446483, "uuid": "220b9330-fc2f-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.165.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741427042, "uuid": "de6d3724-fc01-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.107.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413784, "uuid": "0003d085-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.107.58", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441143, "uuid": "b2f9ce63-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.17.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741419843, "uuid": "1b1e0c03-fbf1-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.208.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741419783, "uuid": "f737bcd0-fbf0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.24.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741414562, "uuid": "cf811b9e-fbe4-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.64.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741447562, "uuid": "a507f5fb-fc31-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.71.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413784, "uuid": "00030307-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.72.83", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400583, "uuid": "4332ece2-fbc4-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.99.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411262, "uuid": "20c43f50-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.166.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741398303, "uuid": "f4593a98-fbbe-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.167.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741428843, "uuid": "0f7baffd-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.172.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741393202, "uuid": "1438f625-fbb3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.17.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456683, "uuid": "e1588bd8-fc46-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.17.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741396023, "uuid": "a56de42d-fbb9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.18.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424103, "uuid": "06477582-fbfb-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.241.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741408504, "uuid": "b4723243-fbd6-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.26.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741395122, "uuid": "8ca3bdea-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.26.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741446183, "uuid": "6effd688-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.35.82", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402983, "uuid": "d9d39d07-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.83.15", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741431362, "uuid": "ed18b7ba-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741476843, "uuid": "d1af37f8-fc75-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402623, "uuid": "0317db30-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741443482, "uuid": "2567aff8-fc28-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.89.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456322, "uuid": "0ab7804a-fc46-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417445, "uuid": "862a5b26-fbeb-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741393862, "uuid": "9d7ef38f-fbb4-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.151.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423562, "uuid": "c3e8dc23-fbf9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.37.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417204, "uuid": "f620a319-fbea-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.41.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741420862, "uuid": "7a83f2ba-fbf3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.222.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392242, "uuid": "d80261ea-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.112.37", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741431123, "uuid": "5e72505c-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.133.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741440003, "uuid": "0bbbf1ea-fc20-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.185.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741437962, "uuid": "4b372456-fc1b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.80.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423203, "uuid": "ee0a1d5d-fbf8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.218.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741421223, "uuid": "51a672ec-fbf4-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.54.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741470615, "uuid": "51dfd5c0-fc67-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.55.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402863, "uuid": "923c2681-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.59.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741459742, "uuid": "00ffcdd9-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.59.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410662, "uuid": "bacda8db-fbdb-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.59.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741473782, "uuid": "b198ebbd-fc6e-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.181.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741415282, "uuid": "7ce4ca82-fbe6-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.187.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467723, "uuid": "95ae2d3c-fc60-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.188.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741436643, "uuid": "38a8c289-fc18-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.189.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456984, "uuid": "94ce7595-fc47-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.49.33", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741455123, "uuid": "3fe45c9d-fc43-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.52.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467842, "uuid": "dcde965a-fc60-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.36.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741472882, "uuid": "9930c745-fc6c-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.146.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409342, "uuid": "a83a30c7-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.243.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741404663, "uuid": "c37c0918-fbcd-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.50.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741422423, "uuid": "1ccec32a-fbf7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.142.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741415461, "uuid": "e7ace3b4-fbe6-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.142.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741395003, "uuid": "45a1e169-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.6.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400403, "uuid": "d8690c63-fbc3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.6.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741408443, "uuid": "9066bbfb-fbd6-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.7.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400942, "uuid": "19682843-fbc5-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.231.147.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741431243, "uuid": "a5f25d72-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.232.5.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741398962, "uuid": "7d7b57fe-fbc0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.115.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741478042, "uuid": "9cc80f45-fc78-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.144.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741394703, "uuid": "92c972c2-fbb6-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.192.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424643, "uuid": "4811daaf-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.50.27", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409403, "uuid": "cc98fac7-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.50.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392123, "uuid": "90a05604-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.59.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465563, "uuid": "8e39bbf1-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.205.12", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741460162, "uuid": "fb5e305c-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.236.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741478283, "uuid": "2bf22044-fc79-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.72.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741463583, "uuid": "f253d650-fc56-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.79.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441083, "uuid": "8f241aa4-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.0.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741440423, "uuid": "05b99b6d-fc21-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.0.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741405803, "uuid": "6ad0bc5e-fbd0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.12.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741395003, "uuid": "45a1e1a5-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.8.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741435447, "uuid": "6fcd4a20-fc15-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.5.167", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424164, "uuid": "2af824bf-fbfb-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.63.143.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741447743, "uuid": "10e7824c-fc32-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.63.243.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410423, "uuid": "2c8cf4c6-fbdb-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.63.83.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741405503, "uuid": "b7f361a3-fbcf-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.83.119.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741474803, "uuid": "12257430-fc71-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.250.21.14", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa306cde-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.99.73.141", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741439223, "uuid": "3ab5d287-fc1e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.251.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741401843, "uuid": "3271e768-fbc7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.38.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741443303, "uuid": "bac0e2f3-fc27-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.157.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741426083, "uuid": "a292b697-fbff-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.203.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409102, "uuid": "1938d9a7-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.194.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741415523, "uuid": "0c9603f1-fbe7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.201.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406223, "uuid": "64e4bda0-fbd1-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.24.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741468203, "uuid": "b3dd4b68-fc61-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.74.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741407183, "uuid": "a160adf2-fbd3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.228.11.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741433283, "uuid": "65db4b36-fc10-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.239.143.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430043, "uuid": "dac1d7e6-fc08-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.148.220.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741401843, "uuid": "3271f56c-fbc7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.13.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741459742, "uuid": "00ff7cd1-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.12.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741440003, "uuid": "0bbbf4be-fc20-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.172.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741415942, "uuid": "064d671b-fbe8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.6.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399442, "uuid": "9b432b4d-fbc1-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.78.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741450502, "uuid": "7db33542-fc38-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.24.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465322, "uuid": "fef3a2e1-fc5a-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.9.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741405323, "uuid": "4cac3ff3-fbcf-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.116.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741476723, "uuid": "8a5598f4-fc75-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.138.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741397523, "uuid": "23a5985c-fbbd-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.29.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741432802, "uuid": "47b06793-fc0f-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.138.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418282, "uuid": "78f5056d-fbed-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.143.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402682, "uuid": "26c567ac-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.148.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467725, "uuid": "973c6f00-fc60-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.220.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741407543, "uuid": "77e05f20-fbd4-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.49.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741405983, "uuid": "d5d6e05b-fbd0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.10.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406761, "uuid": "a610c84d-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.175.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741419362, "uuid": "fc75015a-fbef-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.119.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449361, "uuid": "d56585d8-fc35-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.246.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741393563, "uuid": "eae18590-fbb3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.253.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741398422, "uuid": "3b9455ab-fbbf-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.135.17.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741476723, "uuid": "8a558de3-fc75-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.120.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741414083, "uuid": "b1d3f45c-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.242.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741463103, "uuid": "d3f5ca61-fc55-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.26.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741468684, "uuid": "d2d3cea8-fc62-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.213.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741393983, "uuid": "e57b176f-fbb4-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.57.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741468442, "uuid": "42ac93be-fc62-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.77.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741463702, "uuid": "398ed4cf-fc57-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.213.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456984, "uuid": "94c9443c-fc47-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.102.189.4", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465562, "uuid": "8e2f45fc-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.172.129.105", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465562, "uuid": "8e338600-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.206.211.242", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429142, "uuid": "c21add5b-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.12.94.10", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741457342, "uuid": "6a724e25-fc48-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.152.94.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741438085, "uuid": "948b4e63-fc1b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.120.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741422122, "uuid": "69f20797-fbf6-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.125.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741468442, "uuid": "42ab9aa6-fc62-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.30.68.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411203, "uuid": "fd88eaa6-fbdc-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.157.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741401003, "uuid": "3df7c554-fbc5-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.171.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741460522, "uuid": "d2087121-fc4f-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.115.72.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741422961, "uuid": "5dd51810-fbf8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.28.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423562, "uuid": "c3e8c20d-fbf9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.30.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741438561, "uuid": "affeaca0-fc1c-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.46.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418103, "uuid": "0e2d4255-fbed-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.192.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741426443, "uuid": "7900984a-fc00-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.39.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402983, "uuid": "d9d3f535-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.131.40", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456803, "uuid": "29544ac6-fc47-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.232.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741440062, "uuid": "2ea287de-fc20-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.115.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741404422, "uuid": "33c4eaaa-fbcd-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.13.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741427943, "uuid": "f716bc5f-fc03-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.70.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741445102, "uuid": "eb0be808-fc2b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.50.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741431003, "uuid": "16e7b54a-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.240.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741395542, "uuid": "86cff8e0-fbb8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.143.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467842, "uuid": "dce5ed2e-fc60-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.7.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741459863, "uuid": "49212481-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.129.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741395122, "uuid": "8ca3ae75-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.218.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741477322, "uuid": "efaab8d5-fc76-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.190.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467482, "uuid": "06966b85-fc60-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.144.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741414623, "uuid": "f39fccc6-fbe4-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.103.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741451882, "uuid": "b4470ec3-fc3b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.208.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741402983, "uuid": "d9d3a2f2-fbc9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.90.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430883, "uuid": "cf5b2b00-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.153.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406462, "uuid": "f37de5d0-fbd1-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.186.22.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467906, "uuid": "02db8719-fc61-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.241.146.170", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399983, "uuid": "ddc200de-fbc2-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.8.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741450382, "uuid": "3631b8e2-fc38-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.8.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741414923, "uuid": "a6a785b3-fbe5-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.134.152.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409222, "uuid": "60d1ff81-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.125.50.8", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430761, "uuid": "86fc9dcc-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.196.8.88", "Tag": [ { "name": "Donut", "colour": "#38b838", "exportable": true, "hide_tag": false }, { "name": "DonutInjector", "colour": "#be18d9", "exportable": true, "hide_tag": false }, { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465563, "uuid": "8e3a1320-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.234.174.141", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa303587-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.131.70.0", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413784, "uuid": "000438eb-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.10.136.59", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430043, "uuid": "dac15473-fc08-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.186.12.50", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430883, "uuid": "cf5b2d68-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.186.12.51", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430043, "uuid": "dac175e5-fc08-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.186.12.54", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467842, "uuid": "dcdea8a0-fc60-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.21.160.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456984, "uuid": "94c99c8e-fc47-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.21.160.32", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406462, "uuid": "f37dd9d9-fbd1-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.251.80.231", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465805, "uuid": "1ea3559f-fc5c-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.189.18.118", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741412342, "uuid": "a48a6cc1-fbdf-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.36.152.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424643, "uuid": "4811c5ed-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.66.164.175", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429023, "uuid": "7abb8693-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.91.33.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411562, "uuid": "d377fea9-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.201.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741417142, "uuid": "d16de470-fbea-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.228.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409582, "uuid": "3784b600-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.180.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392242, "uuid": "d8028750-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.240.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413784, "uuid": "00043425-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.115.58.61", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741438803, "uuid": "4093b0a1-fc1d-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.167.202.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400883, "uuid": "f643bdb3-fbc4-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.15.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741458303, "uuid": "a729f769-fc4a-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.36.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741449661, "uuid": "8862e908-fc36-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.41.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741397403, "uuid": "dc09e0ff-fbbc-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.142.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424643, "uuid": "481c6faa-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.0.23", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741469703, "uuid": "3249ae08-fc65-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.213.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741439942, "uuid": "e74eaf52-fc1f-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.25.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413906, "uuid": "484d0a2f-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.105.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406761, "uuid": "a610b869-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.191.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741397523, "uuid": "23adaa6e-fbbd-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.112.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741446183, "uuid": "6effe6c1-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.156.200", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741432862, "uuid": "6b1c2ea3-fc0f-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.235.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741477022, "uuid": "3c832e45-fc76-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.208.111.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406761, "uuid": "a610add0-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.220.145.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741477743, "uuid": "ea6864a8-fc77-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.72.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741461423, "uuid": "eab7f544-fc51-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.76.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741426023, "uuid": "7ea14bd7-fbff-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.154.81.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413784, "uuid": "00034e0c-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.208.81", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa302ff6-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "24.35.36.175", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741462082, "uuid": "73de3a72-fc53-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.210.8.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406703, "uuid": "8321c743-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.212.157.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741427943, "uuid": "f716bf65-fc03-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.47.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741395661, "uuid": "cde38f31-fbb8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.219.187.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392242, "uuid": "d8029754-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.122.74", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392242, "uuid": "d8027a85-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.6.252.7", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465563, "uuid": "8e38171c-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.217.117.110", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741466823, "uuid": "7d6634f3-fc5e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "34.85.195.5", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741454823, "uuid": "8cb04943-fc42-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.48.59.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741408382, "uuid": "6c1d6bee-fbd6-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.65.196.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741459202, "uuid": "bf381759-fc4c-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.71.118.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456984, "uuid": "94ce72fa-fc47-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.78.228.167", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741463824, "uuid": "81c9ed24-fc57-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.65.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424942, "uuid": "fa922d4e-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.68.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741428123, "uuid": "6275c100-fc04-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.89.206.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465562, "uuid": "8e2edb40-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.68.108", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741446061, "uuid": "269795c2-fc2e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.98.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741475883, "uuid": "9594b7a9-fc73-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.111.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741403163, "uuid": "450096eb-fbca-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.241.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413242, "uuid": "bcf1c30d-fbe1-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.3.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741459982, "uuid": "903dc4d7-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.76.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741394703, "uuid": "92c973f8-fbb6-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.148.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741477262, "uuid": "cbf08b64-fc76-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.207.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741416842, "uuid": "1ea515f0-fbea-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.21.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741447562, "uuid": "a507f42c-fc31-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.216.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741468682, "uuid": "d1cf7cff-fc62-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.32.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741457342, "uuid": "6a7168d8-fc48-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.37.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400342, "uuid": "b3e6f6ce-fbc3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.45.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741439282, "uuid": "5df17f1e-fc1e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.71.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741443482, "uuid": "2567978f-fc28-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.178.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741395183, "uuid": "b08b34b3-fbb7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.181.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741450382, "uuid": "3631c69b-fc38-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.64.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741471203, "uuid": "b02af189-fc68-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.84.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411446, "uuid": "8e8c96fe-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.107.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741434842, "uuid": "07823368-fc14-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.89.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409162, "uuid": "3d18f7ca-fbd8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.148.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741410183, "uuid": "9d88699c-fbda-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.71.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741404422, "uuid": "33c14911-fbcd-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.75.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406223, "uuid": "64e4bc12-fbd1-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.83.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418943, "uuid": "029247a5-fbef-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.236.148.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741424643, "uuid": "481181ae-fbfc-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.56.152", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741414562, "uuid": "cf81222d-fbe4-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.135.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741476903, "uuid": "f56274ce-fc75-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.138.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741451403, "uuid": "96a690dc-fc3a-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.30.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413483, "uuid": "4c214bd6-fbe2-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.0.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741438743, "uuid": "1c6ba7de-fc1d-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.51.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741440123, "uuid": "52fdbcaf-fc20-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.239.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467842, "uuid": "dce51318-fc60-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.10", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456984, "uuid": "94c8fbe0-fc47-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.146", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741435447, "uuid": "6fcd40b6-fc15-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.178.249.169", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413784, "uuid": "00040b60-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.178.249.214", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741435447, "uuid": "6fcd4859-fc15-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.178.250.158", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa30c5e8-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.162.97.222", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa30eaa3-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.237.194.158", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741431604, "uuid": "7d274309-fc0c-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.252.177.18", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741470542, "uuid": "267bdbf4-fc67-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.122.233", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741466825, "uuid": "7ea9fdcd-fc5e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "58ff574.na3.to" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741425961, "uuid": "59fed700-fbff-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.123.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741396622, "uuid": "0ab03f07-fbbb-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.220.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741394223, "uuid": "74a93412-fbb5-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.84.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741423743, "uuid": "2f9f1f6c-fbfa-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.88.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741427882, "uuid": "d3021fc4-fc03-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.99.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741445823, "uuid": "9856084b-fc2d-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.96.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413962, "uuid": "6a1fc9e4-fbe3-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.54.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741468442, "uuid": "42ad9679-fc62-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.129.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456984, "uuid": "94c95159-fc47-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.131.111", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741393923, "uuid": "c1910c63-fbb4-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.132.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465924, "uuid": "6593cb2d-fc5c-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.135.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741457103, "uuid": "dc08adfe-fc47-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.137.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741478223, "uuid": "084aa7b6-fc79-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.155.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741461122, "uuid": "37809a73-fc51-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.3.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741459323, "uuid": "073318dd-fc4d-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.3.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741473902, "uuid": "f9168d24-fc6e-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.35.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741422782, "uuid": "f329c7a0-fbf7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.37.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741418703, "uuid": "73bf1502-fbee-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.40.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741456563, "uuid": "99e15953-fc46-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.174.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741399022, "uuid": "a118664d-fbc0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.191.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741444023, "uuid": "67951609-fc29-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.92.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465562, "uuid": "8e36fe32-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.121.48", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741396322, "uuid": "57b7c26c-fbba-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.124.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741411446, "uuid": "8e8c87ab-fbdd-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.124.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741459863, "uuid": "4918e6f7-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.69.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430702, "uuid": "64045aec-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.70.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392962, "uuid": "85069983-fbb2-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.98.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741435447, "uuid": "6fcb1592-fc15-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.137.125", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467722, "uuid": "95accab8-fc60-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.139.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741476242, "uuid": "6bb939f2-fc74-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.250.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741398182, "uuid": "ac8ebcb1-fbbe-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.253.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741408023, "uuid": "95b57436-fbd5-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.254.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741422423, "uuid": "1cceb6e2-fbf7-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.254.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741416242, "uuid": "b913e7de-fbe8-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.16.161.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa32bd6e-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.160.171.230", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741478283, "uuid": "2bf21d91-fc79-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.237.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467842, "uuid": "dce167dd-fc60-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.107.180", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741427703, "uuid": "683b02b0-fc03-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.227.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741400762, "uuid": "adfc7405-fbc4-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.228.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741392242, "uuid": "d802ab55-fbb0-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.108.235", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741467904, "uuid": "01e61d91-fc61-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.142.139", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741413543, "uuid": "70196156-fbe2-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.99.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741475942, "uuid": "b90f61b4-fc73-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.225.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741396443, "uuid": "9f9eae4e-fbba-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.33.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741406882, "uuid": "ee2d3ddf-fbd2-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.159.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa301b89-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.109.227.66", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465805, "uuid": "1efaaa00-fc5c-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.109.227.67", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465562, "uuid": "8e2eed5a-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.49.126.169", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa30180f-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.20.230.95", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa31935e-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.204.91.157", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa328ad4-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.241.165.210", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465744, "uuid": "fa330a79-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.27.208.153", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465562, "uuid": "8e36657e-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.5.216.8", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465562, "uuid": "8e2e7d44-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.159.93", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1741465563, "uuid": "8e41715e-fc5b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.44.219.8", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741443483, "uuid": "25844438-fc28-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "arch1.usa1news.buzz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741460162, "uuid": "fb76682f-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "authenticatior.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741429203, "uuid": "e60952c8-fc06-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "botnet1.uapworx1.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741443422, "uuid": "01a05f15-fc28-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "cariz.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741460162, "uuid": "fb766a4a-fc4e-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "certified-doc.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441143, "uuid": "b3035f22-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "charmdelights.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741469804, "uuid": "6e7eaf53-fc65-11ef-9f33-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.juxoi.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741440904, "uuid": "246e380e-fc22-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "farmagrupodw.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430525, "uuid": "fa3c844d-fc09-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "files.whined.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741466585, "uuid": "efa9f1f3-fc5d-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub.goblinzone.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741443422, "uuid": "01a0b55f-fc28-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "refereng.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741409583, "uuid": "379b3292-fbd9-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "tag.shufflerline.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741431243, "uuid": "a5fb00f7-fc0b-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "w.shavsl.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741430583, "uuid": "1cc54f1f-fc0a-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "x.0.feedback" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741441624, "uuid": "d1f0411c-fc23-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "x5.eioae.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1741443424, "uuid": "02ef5858-fc28-11ef-aa53-82aee05be84a", "comment": "Malware payload delivery host", "value": "x72.eioae.shop" } ] } }