{ "Event": { "published": true, "date": "2026-05-21", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-05-21", "timestamp": 1779408924, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "f2a51d3f-6fa1-487f-bb20-c6daa857ea46", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1779341526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779341526, "uuid": "1e2ea94b-f881-4ac5-b445-e47606b8009e", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779341526, "uuid": "aa363770-f4d2-44dd-916c-a9208998df8a", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779341526, "uuid": "d96b20c5-addf-41bd-b545-413a508f5b5d", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779341526, "uuid": "4c91842a-1772-4209-a2cf-05913e21a745", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779341526, "uuid": "db1cee6a-30b9-478c-9bea-6fcbbb79beec", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1779356776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779356776, "uuid": "7c0a2455-19b8-4466-8864-2b0e3acb4c8b", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779356776, "uuid": "23014105-eaa7-4f79-aa34-a8ea4751d93a", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779356776, "uuid": "4e444732-5625-4f47-8c59-d46187972677", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779356776, "uuid": "a8528c2a-182a-4686-9342-1b6d10d6febf", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779356776, "uuid": "6cd5fab7-dee4-43ec-aebd-954579cf0321", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1779325535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779325535, "uuid": "293748b6-31ab-4c70-9c1c-0ca5616c0338", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779325535, "uuid": "eb126371-0e8d-42c2-8587-1c49cf483886", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779325535, "uuid": "9bd15bac-27a2-44dc-aeee-2f9fcc019946", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779325535, "uuid": "ecef1cf6-03d5-4096-88cc-defa37b5ed02", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779325535, "uuid": "a357d037-e3ca-4f8f-a95b-975d356d50c9", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1779352266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779352266, "uuid": "7d565a58-570d-4b87-9078-4624dea297d1", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779352266, "uuid": "a8b34f7f-469c-44f8-862c-e632b06da3ff", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779352266, "uuid": "e940753d-6be9-48e2-9530-9f8f92d47151", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779352266, "uuid": "a09102ba-23d7-4f4c-9efa-9ff6438e12b1", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779352266, "uuid": "e76ec641-4f34-437d-998c-beb234df1a35", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1779327367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779327367, "uuid": "5141e86d-7903-4bb7-9bb7-06bd9012dd42", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779327367, "uuid": "918d8c3f-a6d8-4a21-b66e-7e840c8e9e2e", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779327367, "uuid": "921723eb-040f-4747-ab87-1df8043cffc4", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779327367, "uuid": "4ffda628-f550-4a38-b10a-26879daac372", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779327367, "uuid": "ca605e8e-4ded-4b7c-84ba-8423f5ded8db", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcfae515-3837-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1779347139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347139, "uuid": "c7e6657a-620e-4b8d-b745-78d170d467ff", "comment": "Malware payload", "value": "c3c561c20e48169f4906c6b0b135984b", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347139, "uuid": "334ccdae-d93a-4b20-943c-d0d704ea4282", "comment": "Malware payload", "value": "b914abc696286a639a847d2e3a4a36ff682f30a87b08c4ffc61f2e0cf5e7ec5f", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347139, "uuid": "0f95b647-2785-46c7-b971-9a54bf3a7b65", "value": "T1ABF53329C35BA51C444DD111B88E299A937D8D177E1E17314E43336CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347139, "uuid": "3cd2f3ef-fb0f-49a8-afa7-2979e0e1b401", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1luc:SyrPO3UDsdXp+z8+FWy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779347139, "uuid": "bd8bbcac-e661-4aa2-ae10-35c99a4eee12", "value": 3526945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347139, "uuid": "a4dfc85b-3a63-4f8f-ae97-30e48d54cbcf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e973364-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1779386831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779386831, "uuid": "5b59f1f4-bdef-4878-bcda-64f9bb5c81dd", "comment": "Malware payload", "value": "83bf51bd93b6db1b112f6ad8c45241b4", "object_relation": "md5", "Tag": [ { "name": "e73f7ff7572070d56a631ac6796adabd", "colour": "#472b51", "exportable": true, "hide_tag": false }, { "name": "limidos.com", "colour": "#b2b00e", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779386831, "uuid": "a3a82844-ef7b-4e00-9937-f4255fe96cb1", "comment": "Malware payload", "value": "050d4043af02c7cfaf00f257f28e8c8313f6f444c843def486fc2141d379da49", "object_relation": "sha256", "Tag": [ { "name": "e73f7ff7572070d56a631ac6796adabd", "colour": "#472b51", "exportable": true, "hide_tag": false }, { "name": "limidos.com", "colour": "#b2b00e", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779386831, "uuid": "570b198c-7cb9-4381-86e9-a2afb8ef60e3", "value": "T1652633B284137CDCDEBB2A32D8043EA60C2E57E37B51959EB8C46B5178D3554EEA81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779386831, "uuid": "b524485a-ea57-47b9-bea1-08a20486fcef", "value": "98304:8DwvLu3hIJofI3PlyLErLXfiGPd1YBJO1XXKVntIW9S6JzW+zhsVm7J:hLuxjicWV6BE569UcNJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779386831, "uuid": "6b802342-217b-4640-92d9-ef39332d1a67", "value": 4762496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779386831, "uuid": "bb74f264-357b-4c0e-a375-37509d2050eb", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ff69cec-546b-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779384308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384308, "uuid": "881ddf27-e007-4d46-922a-13d1a9181f87", "comment": "Malware payload", "value": "36c1327054bbfe16cc7b0f37efb5186d", "object_relation": "md5", "Tag": [ { "name": "ocx", "colour": "#4de83f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384308, "uuid": "846ff98c-76d9-4407-8eb5-933639df5d56", "comment": "Malware payload", "value": "22ae77bf2dd85bd596e41844309147c2e52aeccd8e39623e87749006c8127d4b", "object_relation": "sha256", "Tag": [ { "name": "ocx", "colour": "#4de83f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384308, "uuid": "57996f13-5963-4adb-a1e1-e89fd5897fb2", "value": "T1F325CF53725C04A9E1A7D739C19B9603D3B6BC166B01DECF63A4824E6E236C1DA3BF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384308, "uuid": "62d03ff7-13f4-4ffe-854d-3990f178c31d", "value": "04041ca64a92136d9d8782d9ea054d3a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384308, "uuid": "479a9847-4ff0-4b2a-a734-74a63e38d153", "value": "24576:o2xvmvcYSRc4d2PFR23VRhcJXjwAS8TA0Ye43ijqn+elfRKMgB:oGOuOxqBlf0j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779384308, "uuid": "e8779e10-d97e-4917-a99d-5621ef82d877", "value": 1036288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384308, "uuid": "b68fd232-c2a8-4a78-b6fb-8e04e65d597a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20144f6d-546b-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779384310, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384310, "uuid": "11d06f09-7041-4206-a866-2cfde0c933f0", "comment": "Malware payload", "value": "e4ee5ed330eaa0602f4f637f5567d08e", "object_relation": "md5", "Tag": [ { "name": "ocx", "colour": "#4de83f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384310, "uuid": "37cc5936-4897-47ed-8b08-b6f0374631e9", "comment": "Malware payload", "value": "33a12c2328db22429c4a515400a57ffeaf7aec48a2a3c299ab6f1ce2d2b0e87d", "object_relation": "sha256", "Tag": [ { "name": "ocx", "colour": "#4de83f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384310, "uuid": "4ef5e9cb-df2b-4026-b7b2-27a4f1dcf42c", "value": "T1BB650207A66540BDD2BBC2B4CA534D0EDB72BC0A47B0A68F1B944D961F277B05B3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384310, "uuid": "c3ca88d0-25da-4f83-822a-33df41002af8", "value": "b03a950a333fd236c07e74eb49a67e2c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384310, "uuid": "837fb37a-89d4-4ec5-a976-afa3e4112e11", "value": "24576:8hyAE7NG1VYp7w1Qm6KaJb6ng/B6JhiPxRHYPfM7iAL7KU:UjE7wh2mbamKxRHYPU7iALe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779384310, "uuid": "69a74df2-4746-481d-ab02-ada6e6c28ee1", "value": 1437184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384310, "uuid": "4da219e1-9600-4d7d-b8d0-a0cb0eb58f84", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "891b9087-5491-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779339731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339731, "uuid": "e1fbc845-2f89-4478-ac6d-084a68a53fbe", "comment": "Malware payload", "value": "d3f43d05d835a4eddedadde278862021", "object_relation": "md5", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339731, "uuid": "83f0ea69-9e34-4fdd-bcc9-15afcc0f932d", "comment": "Malware payload", "value": "c90991055abc5848fe35243c614bbd32c310300fc7ecbb615271d2295c9cc8aa", "object_relation": "sha256", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339731, "uuid": "e0de45bd-d128-4d20-b1ac-6ba6d8cd3f74", "value": "T19A167D19F7650CF9ED67967CC8520906EA72BC5647A0E6CF13D00A9B2F236E09E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339731, "uuid": "68b589eb-2d57-4ab1-8a7b-58a94d35d22c", "value": "5f833026d89bc395f463a777c49a1644", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339731, "uuid": "791d3b6f-0287-473c-a6ff-d703713aaa83", "value": "3072:km0ZfXzLATT47DPPjxb7s1xtBKuJpbZgMo0veGvWsTHCDrvanNM/UZggAP3TS1S0:6ZfPLVI1xKepb9xGeCgvZgg8SRUE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779339731, "uuid": "47c164d4-2d35-46a2-8479-49e94e411b28", "value": 4194304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339731, "uuid": "0454b4d3-2698-4e3d-8f08-8af5a911b16a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddca5be8-54ac-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779323685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779323685, "uuid": "c1088545-92c7-45bc-8846-ee49ac72537c", "comment": "Malware payload", "value": "661eee3128deb37903ee96462680e742", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779323685, "uuid": "8cfe587b-4b76-44f6-b3ec-cf13fbc73cbd", "comment": "Malware payload", "value": "0041258d1ad3723aa1cbe9e7b193509a1587c580c92918571cd8c4095581ed0b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779323685, "uuid": "71eacc66-ea91-4b0d-a22d-811d7ddd2ef7", "value": "T10593F83174AF052A166F835E80427B1CEBA982DBC601DAE8F4FD51195FF4D8933A76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779323685, "uuid": "becbc87e-8961-4903-909b-8d6326560c4a", "value": "1536:ZByp2tF/uwMmAIa14oXZzIjepeV7tb73WkAxCWGtk05fy2v05xURr6KSNsgTKRu7:Z8fIM+1tk0Fy2v05xURrYNsgT2uWy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779323685, "uuid": "3cf5db3f-bb62-4360-8bbf-d6852e69202b", "value": 93178, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779323685, "uuid": "c62fcf02-fe39-44ce-ba10-5a1fc7118d88", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86f6e3fc-54b2-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779326117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779326117, "uuid": "7870cf40-1068-4fb2-bc36-3a07224ba124", "comment": "Malware payload", "value": "0fe4d46039005a2c87e0cddd05e7a0df", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779326117, "uuid": "980dc48c-855b-49fa-91cd-f4de1c342b4c", "comment": "Malware payload", "value": "683e263918425ae499c8f51ea8d76fa71292ab56bbf567d2b767122b092adf0e", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779326117, "uuid": "7647c127-409a-4852-bf66-a59331218050", "value": "T1D1D097B200A302B0E8634923F9C6F50271458F7E9D22EB6DF45B46303E81A09F0D13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779326117, "uuid": "4dd44229-71a7-45a9-ba66-878dde6cd949", "value": "6:hTuIF2fMWsXo2Fx4/2DHAulNXYq4HvXDG+NjVsNXYrkJ:VJ4rsXrFm/2DHPiq4HvXDGmKi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779326117, "uuid": "bff444ec-b61a-48c6-a367-a5df40027c62", "value": 263, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779326117, "uuid": "14a06966-633c-4570-8e12-f31d9b3e1bab", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6203a99-54b2-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779326169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779326169, "uuid": "76ff6bb9-6aa2-4062-a892-cd3eeeed054b", "comment": "Malware payload", "value": "b62de7df1761b587afdaea00dca6f40c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779326169, "uuid": "1595d058-b343-47cd-a532-2a04548ad03e", "comment": "Malware payload", "value": "91556fd30d16d08d7aa29c901abf92b3b63c675b3200571e3f2f40b136c5c07f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779326169, "uuid": "3e272cad-0a89-4505-b235-5f60f6fa6fa6", "value": "T1FC7394B13D8B2C2A110F029FA057321CA4D6CEE0E513A5E8F1FF912867F5DD176976", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779326169, "uuid": "ddf3a3ed-ce99-45f6-8180-b1d2b1cf24ef", "value": "1536:ldNKuu59f5spVEc9lGzvEQYM1tAZa/dP+3mT6j:d09f5sptkzvEQYM1tAZa/dPCU6j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779326169, "uuid": "8bd45182-c209-4f3f-989e-b84aca0374dc", "value": 77370, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779326169, "uuid": "445d269c-6a65-4822-9313-e99209539c67", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fe5e340-54b7-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779328091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779328091, "uuid": "65e0ba56-2da9-400a-a414-a721170fb7cf", "comment": "Malware payload", "value": "8295b22000b857a658b82686e6297525", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779328091, "uuid": "95ca2b97-f1a4-4510-8a1d-f7b42f4ef31b", "comment": "Malware payload", "value": "d31521309e2a18bd5fec1bf0ee7712d540578f2526a9704a53aedf25861ea3e2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779328091, "uuid": "9d298459-092c-4ad7-b402-a60cbd045a2c", "value": "T15A93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779328091, "uuid": "2e30c037-6bae-420a-8c20-272c8b27c410", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXDIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779328091, "uuid": "a4b71387-24e8-4989-9f9e-191048a58372", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779328091, "uuid": "7c5bd528-6568-4eed-9f07-8be0203d0a05", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4086c183-54be-11f1-8974-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1779331152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779331152, "uuid": "7c9536cd-ee5f-4b1d-9a5a-9cf2129898f4", "comment": "Malware payload (QuasarRAT)", "value": "37034a2d741209c3f0a3a7f464a64aa4", "object_relation": "md5", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779331152, "uuid": "744c2ae2-719a-42c9-b7ab-77604f2570fd", "comment": "Malware payload (QuasarRAT)", "value": "bb9ab94531de014f6561768f39cd059c630c5ce07828d124fd5150bcd70d5b90", "object_relation": "sha256", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779331152, "uuid": "2f54edf4-205e-4181-b6fc-5cc20a081d00", "value": "T15D25CF90B3F4851BE1FF1B79E4B249494BB7B9525A76DB4F188890AD1FB37408E103", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779331152, "uuid": "15f8b15c-449e-4c96-a542-72b14967d009", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779331152, "uuid": "16e9c4c5-9f62-4ecb-b7aa-aa7a01e62038", "value": "24576:hXUerxJzck+uGW/yFoBkkAQD0wZ7P18q8ZhG11:hXUerTYjqqanT9tevG1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779331152, "uuid": "07adf701-e931-41f1-b092-3c71c0640466", "value": 976384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779331152, "uuid": "945cc04f-aeb2-4ade-8017-6d67b4f1771c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37d21a1b-54d2-11f1-8974-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1779339728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339728, "uuid": "8c5296d6-60fb-4602-afb4-d99d5d44538b", "comment": "Malware payload (Amadey)", "value": "5e6a7ee7c2e445343b726d0adea0f361", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339728, "uuid": "affce108-4d25-4247-860a-688cc865739a", "comment": "Malware payload (Amadey)", "value": "bb0cfaefc4d1e0461f577c1ef040bd576a9560631f05360c242d7d567b5cca94", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339728, "uuid": "6c79ae0e-a31c-49d3-8340-145323f63638", "value": "T1C6D319C6BBD69CE7DA16123884AB8329133CFBC557839703093972351F13AD0AE9B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339728, "uuid": "1811e767-f6f7-433d-9d7c-41e0f12c2330", "value": "76f709724d7dce056ca8cf6eba16afdb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339728, "uuid": "88063e80-ed32-49f5-ba1d-dcefac1c96e3", "value": "1536:OCZF4h34JWsS8jMJDEia4XvMe+7o65KfM5JF4kX7Fj2nX45KWEHY+CU7xesmxXBC:OCy340s/KD3K607bZ2HY/Zt0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779339728, "uuid": "4a5c34f0-5f5c-4e82-883a-090020e76c1b", "value": 131336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339728, "uuid": "02c349d4-d71a-4589-bbb1-e9e5b173391b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a33153b-54d2-11f1-8974-82aee05be84a", "comment": "Malware payload (RemoteX)", "timestamp": 1779339732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339732, "uuid": "2515a3db-44ae-4879-bcda-deae17b88e7f", "comment": "Malware payload (RemoteX)", "value": "aa1c33189059a2b0d113b7e8eace15aa", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RemoteX", "colour": "#6d8996", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339732, "uuid": "0ba46777-68d6-4482-a41a-92c12772d274", "comment": "Malware payload (RemoteX)", "value": "a96aae9e2815f4a2c53b9bd0414c59dafed26cb4162824ad53a2b7af51cbd96e", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RemoteX", "colour": "#6d8996", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339732, "uuid": "347fa380-7bbc-4c1b-b1ce-3ef0fed9ea51", "value": "T1BB27E007EC9515E9C4AAD234CA629253BA717C491B3173D72BA0FB382F77BD06A797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339732, "uuid": "0cd44afc-5434-4897-b116-06703aa98aee", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339732, "uuid": "ffe9c6a6-a464-427a-8afa-2a312c2612c8", "value": "393216:XeNSr1g9SVw98uRBe4yDHBZmzxW+bE8FnE4gxaDMz7LL:XuU1ADHChAzxzE8FEVxaDM/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779339732, "uuid": "acaa9356-0a0b-43a1-8f3e-4825d86fd5d1", "value": 20448768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339732, "uuid": "9d7b9206-dee8-4226-9f38-1876940adffa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44b1ea95-54d2-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779339749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339749, "uuid": "85a8b810-2c2d-44d9-977b-916ca10359bd", "comment": "Malware payload", "value": "2279df9aebb74d09d0740bc283bcd734", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "pccvill-com", "colour": "#6ed8aa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339749, "uuid": "2d8824d8-37a2-45dc-bba5-5c1cbf8ed8e8", "comment": "Malware payload", "value": "70f8889bfa65464908e36fb4687d9385dff1f89cb2e67106dba3c722fb97eda8", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "pccvill-com", "colour": "#6ed8aa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339749, "uuid": "57f626e5-d77d-412a-b43c-51c99f8c40a7", "value": "T123383367E346B47DF06A67362A72D110603B7E1739028D1BDADC21ACDF316907E3A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339749, "uuid": "63fe85c3-b530-4983-8822-28f451341b73", "value": "88016fcdef7f227c62171d0afad9aae4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339749, "uuid": "699f0e4b-908c-41cd-9698-6807078c2713", "value": "1572864:D1nJc1K82d1EZdNCx/38giYAs79HoWh8nMJ/BJWUePOjvF2eCUUzvFAjKKZR+sH8:pJR84o4FiYr5oW+K/LWUeG3dMvgj8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779339749, "uuid": "667247c5-465d-4906-b34e-7aa5e0f96478", "value": 102819464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339749, "uuid": "db93fad7-0369-4bb8-b0db-7d94b1c61bf7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5deec79d-54d2-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779339792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339792, "uuid": "5f87e969-73a5-484d-afd0-a612b4b2fd94", "comment": "Malware payload", "value": "d9fb6af03060bf57b7edfc415cb3eaff", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339792, "uuid": "75259501-266c-400d-8e6e-e0a0312ab83f", "comment": "Malware payload", "value": "3936b5569b62f00c2f7128e538ffdceb05193d20a7fce06f0357d86792bee028", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339792, "uuid": "d4fa0aba-d607-4ea8-8ccc-c521429b041b", "value": "T1636633B6E214D9F4C42E966A60E11340938133EDDC42D8EF9FF2AED071E2E8564E93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339792, "uuid": "93fa07fd-1967-466a-b720-197ce0b670a1", "value": "196608:+ZftbeN2U0uU+HB/OGUElH6XU8YYlbHXUV:+BlNUrU+h/PUEl0U8YYlbEV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779339792, "uuid": "056d242a-1db0-402c-bfdc-f4f8973f746f", "value": 6643602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339792, "uuid": "1f084492-ea2a-4184-bf20-672bb83da741", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "037bd4be-54d5-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779340928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340928, "uuid": "408a527c-d87b-47c3-8106-b02b669545de", "comment": "Malware payload", "value": "eb8e95de04a4270bb83e4085b18e26a3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340928, "uuid": "8c740475-b98c-410f-b86e-36deb1f47d50", "comment": "Malware payload", "value": "0178551da7eefc9dc28fae9cc4eae513a0086badb7100712ea936042bfac76da", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340928, "uuid": "f8585bf4-3d07-4abd-bebb-226d7706dabd", "value": "T165A425B9D5061B1D42D0F736E93E5C0C1F24CA43DB2D889286BA27FA26126F14B779", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340928, "uuid": "3f2271db-cea6-4a54-abce-5352182a21c9", "value": "6144:ONA3f2s4zw5Ho6aj46113r4BytkS0Gup+4M30Ft1czbiPCSG3oc5KhIj9o0:aah4zoo6a/18yWS01+u1c/iPCS3eBp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779340928, "uuid": "a2f715b9-a984-4748-b9d5-0d98179be8e0", "value": 483136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340928, "uuid": "489f5ddc-f11c-4bf7-aa13-e02eaab3fc52", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "041e9f1f-54d5-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779340929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340929, "uuid": "c62ef8f0-8748-4ea8-9925-6df36d0534ee", "comment": "Malware payload", "value": "7de43e287c592cd54fd4d1c9fd4b2ac8", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340929, "uuid": "c0c6a6eb-3fe6-49f7-8d0a-3b02c6e5fec7", "comment": "Malware payload", "value": "2c9ba8d7ab67f17719f0015cfcb2f427908d00eff15f696effc382ecccacf43a", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340929, "uuid": "b9fb5ed6-4533-4e1e-82d0-3ea134417a13", "value": "T169B4221CD9F5A4507549C6E9CA4DB4A464A5AF72086921CCC13788C73D8BCEC9CEEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340929, "uuid": "7e89b8b2-ec22-427b-9aa4-f305e844278f", "value": "12288:wfgsY3bw5JOHQVaZ9P2aahvYusKAdp5f26LQh1F0KZiyLARUhWpF4/8:ugb+mj3OaKQ8CQKodpk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779340929, "uuid": "b0fad0a9-3732-4f31-ad7b-1ea1313593df", "value": 507456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340929, "uuid": "ee4e7780-7e6c-4190-8c23-0e24beef1a64", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "283aee04-54db-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779343567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "0398d987-4f84-44c1-af77-b5cd6cede1e2", "comment": "Malware payload", "value": "45302d09413c1793d2d9582dda633731", "object_relation": "md5", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "45fdcee8-281e-4116-a18a-00c626b4e90e", "comment": "Malware payload", "value": "333e7b9d00b3b4270576d47b3a106c963151b448273e5fcd7245f0cc2ebae08e", "object_relation": "sha256", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "164d5f43-9b11-4b6a-b8f8-266102116275", "value": "T1739412764643FD8B3F391C84A6A02C605C87784B83E6D229BDC0089EA5FF154DF2A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "44eb5ba3-fb34-46c0-a248-2a40390c9eb4", "value": "12288:gFRd8QknvFYp+lWWQN2aSFchZE5mqnpjkfNVZkBNdyxTV:gbdWvFzONvSF0YnuVk6V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779343567, "uuid": "cfd28594-3cc4-46ec-b90c-1642fd59b6c1", "value": 446849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "efc30380-5250-44b7-b731-c32c244dde60", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "283e6cf1-54db-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779343567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "0ff35345-96ed-4063-8274-53e569280ef7", "comment": "Malware payload", "value": "7c47c9a9014ef4444c89bc8fdbcc5e24", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "8808a6d4-f6ba-47c9-98c1-254d6266c774", "comment": "Malware payload", "value": "ec383e7f159506ae8b341303756b5cd7c6d4e1bcde55d93ba8956f8b94fab538", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "ebe8e3e6-c889-4bb6-b86a-09b6f25408b6", "value": "T12A644B7B661EAAAF4EBF3D08C6411B476C1C4C97C33C90E86FD6587A50B7948C874A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "7f0aee6d-0393-48d1-bf91-2152f69d824e", "value": "6144:/bDWxZnbw5qH8WcUDMJdCMVAQgDqRiuUJOW+B1YyLLd:jK5UQH8ISdVAuN0oeex", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779343567, "uuid": "f5f2d622-b4d4-417f-8144-deff83b3d83c", "value": 312288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "4ae26507-1da6-447d-ab1b-6bb3019951e4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28449bc2-54db-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779343567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "76cffc60-8d95-4b6d-9ec0-d8558b6535ac", "comment": "Malware payload", "value": "ff0e917b0ec7e80200ab4e4b4c2739ba", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "1b35b5a2-b9fd-4933-ad21-be83a5550f5c", "comment": "Malware payload", "value": "399c41a4f0fda7adfb70230f61eb6ba7b76c9c741de15212a890511e085ecd2c", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "96486501-cc1e-4ee2-9851-11d17de605e4", "value": "T131256C7B422BEADF1E7B2E04C4040785DC1CEC97A77C41D82FC3996A91FA9589878A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "3ef8641e-89be-4f01-9462-a6c61ea2fe05", "value": "12288:Ed2+76i1wjGzKAG1plMeCYRCMk66Y7kaapkDXGGPqrz2NlQOLLsU6VGHJz11YgPs:6SGoMeCYcF6T7fj2s7kOuP5C2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779343567, "uuid": "a2321f54-eedc-45af-ad39-1d459f073023", "value": 1035180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "bbf41a73-f187-4b83-8e93-b53e458a928f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2845a86d-54db-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779343567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "9e666142-5c10-4996-92b6-6f4bc4497ed7", "comment": "Malware payload", "value": "4ef1e0bff5c97f13395d784e9de10490", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "5b891e63-7884-48eb-ad19-1d0c0c671c95", "comment": "Malware payload", "value": "0f7c985e7699beb7847da15adc298f0af9dd941c5a051a89260b399064ca386f", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "55a9bac2-92b9-462b-98a8-f5342cd9b8e5", "value": "T12E643B77651EAAAB4EBF3D04C6451B4BAC1C8DC7C33C80E86FC6583991B7958C874A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "c000b5e3-03cb-4cdc-9e19-7ba1f6ffedf7", "value": "6144:ZCaVmzebMuzkBsRf0nxBH/unKwI/LXeiFenq6/osDG+wGrpwY95Pd:/mz/FBsxMEKzLLyvnG+P2Y95Pd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779343567, "uuid": "ddede6a2-40dc-4eac-a8ac-8cfb073d932b", "value": 313164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "0b744318-94f0-4b8c-9028-e214dde3d386", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28640606-54db-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779343567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "294c182d-b7f1-4d79-b507-1bf435e9ae3e", "comment": "Malware payload", "value": "2949c6ed3bd313a71439d10901464c16", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "10d9f525-fc72-4fda-944c-31a46c4ad7f3", "comment": "Malware payload", "value": "a460af6222ebcb3a0eebaaa9f0d81fe8fe3148c8648d35419e3a470f17178af6", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "11555564-6e57-469f-a3c1-5e4f720fcade", "value": "T126256C7B422BEADF1E7B2E04C4040785DC1CEC97A77C41D82FC39D6A91FA9589878A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "7fbeae33-5e9e-41a8-8699-2d6123715a63", "value": "12288:Ed2+76i1wjGyKAG1plMeCYRCMk66Y7kaapkDXGGPqrz2NlQOLLsU6VGHJz11YgPW:6SLoMeCYcF6T7fj2s7kOuP5C8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779343567, "uuid": "b1837e85-1263-4834-905f-d2bd05b01464", "value": 1035196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "fa2b88c9-7eea-40ec-9207-65c242690efc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "286879ef-54db-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779343567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "487ef812-c56b-43a3-99d9-616179439544", "comment": "Malware payload", "value": "5a9749669cb1c04fad631c33290fd122", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "7e1a8f02-39ca-40b7-8a32-af6b953af74e", "comment": "Malware payload", "value": "847ed9a788359d481d385f4055883259a07f91b9c2e8c8e81dc799b119c4af61", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "3139020e-b076-40a6-ad01-369b51a8d3f8", "value": "T180256C7B422BEADF1E7B2E04C4040785DC1CEC97A77C41D82FC39D6A91FA9589878A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "c2d94ac7-24dd-4c9b-a9be-73d1bf2284c4", "value": "12288:Ed2+76i1wjGGKAG1plMeCYRCMk66Y7kaapkDXGGPqrz2NlQOLLsU6VGHJz11YgPr:6SboMeCYcF6T7fj2s7kOuP5CN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779343567, "uuid": "ef32be94-b814-4175-873f-b06988412f8a", "value": 1035200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343567, "uuid": "991fe2b9-1c3c-4b45-9099-5329e0fbdf24", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08c0e88c-54de-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779344803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779344803, "uuid": "6619ca8e-df99-417d-adf4-71b2c3ab6a06", "comment": "Malware payload (Mirai)", "value": "ccec0cfb06531861d394b09ede401043", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779344803, "uuid": "0bf34b2e-da27-46ef-b9ed-0daab10cddd5", "comment": "Malware payload (Mirai)", "value": "0a671a878c392e35447275c55111164842bf9feb94ec7b2e51ecc09685ae4f88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779344803, "uuid": "dbfc4175-d307-4501-9b27-923a0e8719ba", "value": "T186A35B8BB6078CA2C9910BF54BC79B8C5FB361408F57D7E23D0D2A384E656DE6D4A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779344803, "uuid": "710b6b57-5814-4db9-8395-52a5613dfc20", "value": "1536:DG1DGQbdAkClOuDFIMogp/LWHhYCqjQ45m89N:D0DGQbdFCVDFIMogpq6jx5m89N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779344803, "uuid": "9e32f9ba-85e0-4462-909e-9f68700b4cd2", "value": 99484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779344803, "uuid": "e286612e-48f3-4211-ad2e-0966747d09af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6989cfe3-54e0-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779345824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779345824, "uuid": "98b6b739-7ed0-4480-9055-742da715481b", "comment": "Malware payload", "value": "c9d1ecf04551ad21d156c9ad1f3d011f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779345824, "uuid": "57294d79-d876-4bbc-95f5-b79c909eba04", "comment": "Malware payload", "value": "9177641233f703f1570e58ee207c432c6342a2af73a29cb766f23a3ea828cc9a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779345824, "uuid": "a92ee03b-0092-4d5c-8445-2b8e3d8de669", "value": "T18D734CB182AC647B211B97DDD2B5B714B0915A31CF462991F3FE82B84FC9EA03875B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779345824, "uuid": "7f023ed4-0ac8-40c8-8477-4b74d1c6a9d0", "value": "1536:HVRypeRZeFmN262HfeFi6CpKkR0p1KDjYCNA:HVMIZeFmN262HfeFv4KkOpcDjYCNA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779345824, "uuid": "821acea7-5b15-4f9b-862a-302f7ff7eccd", "value": 73996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779345824, "uuid": "1b35a3e8-c51e-4eb2-9955-fec0c367b043", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02fa8d9f-54e1-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779346081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346081, "uuid": "58205971-81f9-4536-80e8-5f8eefd1ad6d", "comment": "Malware payload", "value": "3e7a3a5cde117b0f5d04ce33ec946b11", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346081, "uuid": "fed93ec4-6f2a-4845-ab13-e3c1ef696e23", "comment": "Malware payload", "value": "1ec39edabadb3d8532bc482b705bfb67c21faf6d986827720aaee6b340f02209", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779346081, "uuid": "aff8adb7-14ec-4728-b4f8-605cab8a517b", "value": "T18934BDC404A54AC29115BEE6F163BDBC4D0B0BF8F4F660AACAF9C578B6EDC5F04548", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779346081, "uuid": "84b1fbe5-4381-43ab-ba0c-eb1c036225bf", "value": "3072:me/D6+ikaYT3SjXgSyRE6nUYkF6s6UGDp3haewgR7tcAsg/ii5tIlFEsGykytn:mMIkxTSXvYU90UaX0k72vgKYClv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779346081, "uuid": "4b6dddd9-a78a-4e3b-8a83-1a6f8f9a6d16", "value": 239709, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779346081, "uuid": "1d6654fb-9d19-4b8d-b45c-7c3b1117e28d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14f28393-54e1-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779346112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346112, "uuid": "dbc899e1-b4d0-414c-ad8b-ca3bf1ee4b8c", "comment": "Malware payload", "value": "06cd0e6488efb6c4e194d5194243980c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346112, "uuid": "ca2a2872-6a08-4cb3-b016-c76adf4f77e6", "comment": "Malware payload", "value": "99f28cce4f017f74516c94100a8b95d6d83e530a24827e0edab7b4c3af3dc990", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779346112, "uuid": "e4d5db7a-83b4-4a35-a6c5-cc67398ac06c", "value": "T1D7040FE3761012BFAD78C9EB7B194DCD50A9FF1043A8A0A39BCF689594A4752E1387", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779346112, "uuid": "23634940-5020-4b5a-b827-ce085dca43e5", "value": "3072:4F0cCFJlw4C9X/u0BAYaJOp9PsRrXFvat846aMs4T5:LEIm7U5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779346112, "uuid": "f2488fc5-3811-4551-b4a7-df45e9c05dcf", "value": 176767, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779346112, "uuid": "1c2f8457-8e9d-4217-82db-c8515aee3c3b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cb632b3-54e2-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779346608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346608, "uuid": "100085f3-5271-447b-8d12-d8b8e439af1e", "comment": "Malware payload", "value": "0d62ba745f103bc363d3808dcbe1b8be", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346608, "uuid": "ec17a518-9003-405f-9a59-0ea1c50acc3e", "comment": "Malware payload", "value": "0694554bd1fe6f0b8e01e5b6bc172afb196e13231fe4f5060259b2a61b529521", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779346608, "uuid": "b0f1fc95-bfc6-48ce-836c-06099bc244e0", "value": "T13A510C040BDD1724D373CD3668FAA20255307867EE169FAE4798158E6862314FE35F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779346608, "uuid": "e676eb05-5d25-4b7c-b061-2fc524c7fdbd", "value": "24:8KAFpQQpGnSYrpcnR4Vok3+f8cy4o0gfb4o0OBq8bM4:87FKSacnR4VT8No5koS5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779346608, "uuid": "4a948198-0619-472c-9656-e321e75de6b8", "value": 2492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779346608, "uuid": "ee29b398-2cab-4e1f-ba49-a295ef3f7704", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a5f8a84-54e3-11f1-8974-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1779347141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347141, "uuid": "6a7e70e9-6938-463d-a8e5-fa41364cc792", "comment": "Malware payload (ConnectWise)", "value": "4721f667a54d91166daf434554253912", "object_relation": "md5", "Tag": [ { "name": "31-42-176-91", "colour": "#03c1a0", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347141, "uuid": "a7e88468-0402-4bbd-8e3b-b15a90cdc8c0", "comment": "Malware payload (ConnectWise)", "value": "c053fe601baa5b1a01da1d3decda83bfa65b588b12d79541138e962b8c74360e", "object_relation": "sha256", "Tag": [ { "name": "31-42-176-91", "colour": "#03c1a0", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347141, "uuid": "4edda5d9-6ef1-4dbd-b703-07f4b8609067", "value": "T134646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347141, "uuid": "b7044751-cd41-4776-a1cb-22b2d115f591", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347141, "uuid": "e2199974-c889-4012-bc03-c1797b6fdb08", "value": "6144:wmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9T:b1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779347141, "uuid": "d485d0cc-9757-402f-953a-2f0985b083e8", "value": 313960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347141, "uuid": "b5b433e8-2a13-478e-a0ee-57d4bf2ee1b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfb022b3-54e4-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779347713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347713, "uuid": "60f3b8fb-d5b4-4c1b-91fe-c1a361294f53", "comment": "Malware payload (Mirai)", "value": "222dcd804e59627a24602d6d2e55e7d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347713, "uuid": "2009f568-6b45-47c2-aa39-819a3ff74208", "comment": "Malware payload (Mirai)", "value": "33c9e7b720dc14324b10d0b7588aa1898b5db66ef44343d7f792a3388cff3a47", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347713, "uuid": "9bd9e173-9cca-440f-8cd7-7b02a3adc62d", "value": "T124934AC3F800DE7FF40AD77B8853090AB271E3614A820B7A7357B967A9361945877F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347713, "uuid": "d5edf956-3233-4a4d-bfc1-38af32cb69dc", "value": "1536:ctYpRDxT0NQ1TGNyU8byaSbpatvaWjkOgs5gDDD2wanloda4fdTb:ctkxT061TGNy5yaSbpWFkRsKeloddVTb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779347713, "uuid": "d8a00416-cbb1-4612-b2cd-447d3ceed0d4", "value": 96712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347713, "uuid": "237f6fe9-6311-4ced-b4c5-1f23a951d27e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3c74402-54e4-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779347774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347774, "uuid": "052fdf68-7df4-4bed-b272-de8bedb274dc", "comment": "Malware payload (Mirai)", "value": "7c4c96e7499a2e451ce4d0f34736510f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347774, "uuid": "66f4dd99-eea0-4c71-ae48-466844ee7b3e", "comment": "Malware payload (Mirai)", "value": "4fcf278fd91fea5105c1603a7d09d1528cccb00fd07ae4ed1b029b5e2a0a7d45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347774, "uuid": "7b640388-d83a-4c06-b668-ca9e75729912", "value": "T10083BF23DD251E98C15489B0B0F2CF762793E4E881871EB79AD5C5ADA053EDCF502B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347774, "uuid": "e9c0b004-43d5-4f2e-a151-a60126fb1804", "value": "1536:6asuwYGtPvFwCYL5kaRc2nKCzcr77NQjlJ1Cr+cAGjMQ:6juwYGtPvFFYfRhKC07GjlJ17/ot", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779347774, "uuid": "c31e64e2-f801-460f-8a87-e4bd132fd0eb", "value": 83780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347774, "uuid": "0e28e4f0-fe9c-4157-8cf7-6e7ef404267c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3db7697-54e4-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779347774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347774, "uuid": "ff539ab8-c116-42f1-beaf-c8c0ccf9ca3e", "comment": "Malware payload", "value": "84291aa5668e98a43db7584b6a46f7b9", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347774, "uuid": "39eb5e9f-7405-4d40-8143-cb8ac0caaae3", "comment": "Malware payload", "value": "a2e011cb148029d53c0aead01b7d9402cd15e2b1c9ec86311dbde41bb515011e", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347774, "uuid": "8d295c14-0578-48e1-be54-73e7fd7ecc84", "value": "T16E5129040BDE1724D373CD3658FAA60244207467EE169FAE4698158E6822310FA35F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347774, "uuid": "d1bc0714-4aa9-4e30-aec7-a3740755eb27", "value": "24:8KAFpQQpGsSYrpcnR4Voj2+f8cy4o0gfb4o0OBq8bM4:87FlSacnR4Vy28No5koS5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779347774, "uuid": "ef03d9ff-1324-4702-bc16-0823ec286cb3", "value": 2490, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347774, "uuid": "b7bc29d0-a042-4924-b4fe-f4e48f98589d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11bad273-54e5-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779347824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347824, "uuid": "9736ae77-33c5-4bf2-ba5e-78a5536f5cb9", "comment": "Malware payload (Mirai)", "value": "6d0512d0b6a0e0a76788f97c3943f7e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347824, "uuid": "f00af5f6-0837-434d-aa51-d7ee106a6b5d", "comment": "Malware payload (Mirai)", "value": "9ddf59b5bed0c9f139c11e0c9f918ef7c31b61dc2ec16bc94f7912a1d202cf1c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347824, "uuid": "7b402097-3798-41dc-b64a-01f002e459b5", "value": "T1E5935C32BE76092BC5D0A07622F34326F5F647DA21BC8A0E3DB10D8DAF256503657B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347824, "uuid": "b2f39dba-9679-41c6-a8e0-348180703f5f", "value": "1536:DI6xfV5AAIi7D+Z/T/I0Od24ROG3EbtribNm58DyZ1kiWNt3ldY:DIwLhKZ7/I0CIbtibNO8gMY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779347824, "uuid": "764bdbf4-1221-4e4e-ae6e-796056bf3caf", "value": 93396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347824, "uuid": "f49e5871-2dc0-4819-acdc-05d43fc0d32e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5b3d705-54e5-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779348207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779348207, "uuid": "59ef5420-872d-4d86-916e-e94795544c4e", "comment": "Malware payload (Mirai)", "value": "71db43e536cdb1bf1a39dd9b7c696a85", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779348207, "uuid": "4758ea4e-141e-49c0-9c4a-974b5dfeb8f7", "comment": "Malware payload (Mirai)", "value": "29250c2ade1e479452c41d664878a9870a658af6014acde565c86e50b44d5cb1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779348207, "uuid": "3dc1c901-d21c-4f76-8066-5de971ff1165", "value": "T172B33B41BD418A13C5C21BBAF7DF47983B26B668D7DB3302AA187FB42F4768D1E1A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779348207, "uuid": "7f2e765e-a164-471d-b891-0c55784c7c9b", "value": "3072:OfsilIQXJAB8RiuymjJmk0O683mFRzf4MQ8Bs0Z+x:cpJAAiRmlmk16Zzf4MQ8Bs0Z+x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779348207, "uuid": "333fd14d-4408-468e-bb6e-751100ffcde1", "value": 115150, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779348207, "uuid": "4befa276-4553-4ede-a896-80bfcd1c9f91", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "651e0b86-54e7-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779348823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779348823, "uuid": "f23dd4c7-0f2a-47e4-baa0-8e337fb5b92e", "comment": "Malware payload (Mirai)", "value": "88cd626d9c89b4e0e78f6dbd1120efb9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779348823, "uuid": "749f2bd2-1f54-4c87-8f8c-73103156d3e5", "comment": "Malware payload (Mirai)", "value": "56cbd90b21d226320c86f2bed01c18448553ae2c8c54ae95f3ab58df5f780a8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779348823, "uuid": "537af75d-d366-4b10-9ff5-97965a802fb4", "value": "T18EF33B06EF818A17C4C20779BA9F43553323EB6893DB73039A287B742F837D91E665", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779348823, "uuid": "ca238ab3-ef35-4d3f-9f04-0cc93b67ca73", "value": "3072:LySySRQoXTS+JYAaHp15WJxHM0qODv3qHV4cCZJq2Ni:FyShDS+J1aJybM03v3qucCnq2Ni", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779348823, "uuid": "975cca07-33d1-421b-8417-56f3875def3e", "value": 163972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779348823, "uuid": "96207bec-22d7-418a-b8cf-1351bac03cdc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4c8de9a-54e7-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779349037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349037, "uuid": "500aab93-59eb-4b22-9645-b6ca9055e0df", "comment": "Malware payload (Mirai)", "value": "045b439c1411f7a113d9502aec5da17c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349037, "uuid": "a75bd60c-91e7-4658-b7c4-aa04272e3eb1", "comment": "Malware payload (Mirai)", "value": "4d3a11c0d32c34fd8b4e803dcfd843e2ecbce805f26f2618632aaf7b2b831137", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349037, "uuid": "30d4d6f2-107c-480b-b2c2-2a34c2fe0b35", "value": "T13DC3AE87B78B1091C86206F447D70BDD6EA3A1055F2B98F33C6D763E4A760EF5A0A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349037, "uuid": "fc33c345-21dd-4d75-81f8-abbb6e8544b8", "value": "1536:R6iRRTzd0OvAjSLuYWcI1AmoMk5x9FlKCi4aOD/xGp91pjg7/+/LWy:sGfZoGCcI1Anl5x9Fji4aODsjjg7+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779349037, "uuid": "e5f8b83b-b0de-4e2f-8fae-13b0c0c8c054", "value": 124644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349037, "uuid": "79971fe0-1877-453a-a5a7-e7a96170d64a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6d26cf4-54e7-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779349068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349068, "uuid": "58deb8d6-4edf-4502-a2d5-80fbaf756962", "comment": "Malware payload (Mirai)", "value": "8acfc29a25fd534ea6c0c627021ca186", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349068, "uuid": "e829ee80-ea75-4625-9917-d7e3e36d67d6", "comment": "Malware payload (Mirai)", "value": "ee1aa365a1e1aadaa322cf09e066ca377d91bddad1b4075adb34f6f0ca9fb2e5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349068, "uuid": "4620a27e-418e-48f7-b907-4bd8199f6cb6", "value": "T194B3D91E7E218FADF368823547B78F21A39923D627E1D685D2ACD5041F6038D581FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349068, "uuid": "e85c237d-0ce6-4144-b724-8b69d9e28c2a", "value": "3072:9RWAkgDRi7PJ+UL2V0WePYb/i7cZbZ+fg:9RWPJtCXkYb/i7++4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779349068, "uuid": "c04304aa-8f02-4b9e-9844-3a231aa5d8ef", "value": 115528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349068, "uuid": "6e284a16-f281-4f45-8b8d-5819158f347b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01f607ac-54e9-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779349516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349516, "uuid": "d7665371-4ccf-4b39-be31-31989d51b248", "comment": "Malware payload (Mirai)", "value": "0500eda17c1a47e7f27b86c5e7379e9f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349516, "uuid": "e57d1941-2610-494d-b516-ed25d4b57c37", "comment": "Malware payload (Mirai)", "value": "79140196f59a107dd4a5b26f3728a53ae6390d6b1879d973299abab0a962e167", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349516, "uuid": "b39a743d-40c9-4e7b-a36f-770d3affdd75", "value": "T180935B01B3180A43D1771DF02A3F27D5D3AAE6D121F4F684351EAA8A82B2E735586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349516, "uuid": "3ee5033d-9b0e-4beb-a2d5-d17d5d78924f", "value": "1536:hE1h0CaMpvxmxFJocN73j5wiTjmrvnzhwfFtd1XKUDeLxiZ4jL5qJstpeKF5WoDM:hE1h0CaMpvxmxFJocN73SiTQcVKZoa90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779349516, "uuid": "dfb2e138-e5fc-4f35-a1e9-bf2dc339fa5c", "value": 92012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349516, "uuid": "14e86626-db39-4690-adca-e8bc96633664", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45d88617-54e9-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779349630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349630, "uuid": "aa2942fa-e6f0-4fba-b009-626d5260925d", "comment": "Malware payload (Mirai)", "value": "ee6d3ff7d5dc7361d15526b9e161ed90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349630, "uuid": "5b3e904e-c0f7-4eb5-8b05-f54615bc4871", "comment": "Malware payload (Mirai)", "value": "f3ceb06a885020d20788f98c12cc2f96e7d16c536614728c91eb0b424a477f29", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349630, "uuid": "b1530e86-2816-47a2-8def-7f8cb4f4e3f9", "value": "T1266302585CD5A2C29D6ED1FF3D3BBB4825067129C1DC91529CEAC1CD050D62863FA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349630, "uuid": "1c4f838e-a21d-42fe-bc05-c8c675ae7cb2", "value": "1536:rVv3rYJ3ye+44+Pw7KnmTBpueCiZca0HZ7Qy:rmJpV5w7Ymmgt05ky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779349630, "uuid": "3d7c0619-ec53-4d0b-8006-4a25e11e5501", "value": 71384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349630, "uuid": "64225cb2-51e3-4792-ac9d-562664ca5bb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51bf27e5-54e9-11f1-8974-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1779349650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349650, "uuid": "e835453e-217e-4c26-8431-b3ab5b66a51a", "comment": "Malware payload (ConnectWise)", "value": "e44cb419508a7cf6f6e609bc5b632f83", "object_relation": "md5", "Tag": [ { "name": "31-42-176-91", "colour": "#03c1a0", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349650, "uuid": "d0e47a25-4f33-4181-838c-3a1d950b37c6", "comment": "Malware payload (ConnectWise)", "value": "585cc4a773e43663a0faba951f836bb71443105225f2a3c6e95367a2c40d8526", "object_relation": "sha256", "Tag": [ { "name": "31-42-176-91", "colour": "#03c1a0", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349650, "uuid": "3a9c5a4a-b7dd-4408-b526-58735626cea4", "value": "T1AA46E101B3D695B6D1BF1638D87A52656734BC049712CBBF5394BD392E32BC08E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349650, "uuid": "c9557f91-43cf-43d1-aa87-59c2deafcf8c", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349650, "uuid": "d8fde6db-d838-4dc8-a173-ab6541f7999c", "value": "98304:8z3us6efPcIdoaxcp8wy5c3trGflkQ5DUOgJ9zl88:8CfefPlHxcp9ym3WltDUJVe8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779349650, "uuid": "11bec4ce-d231-47da-8957-53b4459470a0", "value": 5708856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349650, "uuid": "5c63642d-a2b7-4ce1-9034-2dd96be2133a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60587e5f-54ea-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779350104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779350104, "uuid": "f5e7f706-1f99-4ddc-b1c4-040a18b5ee7a", "comment": "Malware payload (Mirai)", "value": "0470da9e00a25184e99a47e07b593746", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779350104, "uuid": "9a256ce9-781c-4c59-b94d-828c4def0849", "comment": "Malware payload (Mirai)", "value": "9f251c2d2ff9bc2c278e8e5c1297b9897a6542520b11adde9f9aa1d3bd6941f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779350104, "uuid": "8d786797-970c-4724-a8e7-5bafadbf195a", "value": "T1691302E03CCD2C3549153EBA81B0A6DD71F0B45525EF66248731A34621F1339E78CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779350104, "uuid": "8fcc5a94-c95c-4412-8637-38976c499aa5", "value": "768:m1wsQtRTDsj7S5zQDExlchHH0wy9xAOpTgTAfcZmhog9ET3RN87nLJOg4az7:IwPzO8ix0D+8TgD+ohN0Lkg4az7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779350104, "uuid": "f89a9d8a-be5b-4832-97ec-d183e2827370", "value": 42824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779350104, "uuid": "3433a1b8-5a84-4326-8b40-a686990e05ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0656425e-54eb-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779350382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779350382, "uuid": "3af9fd0c-abc0-45db-8fc8-37450e9d29ff", "comment": "Malware payload (Mirai)", "value": "31ca2638fef63c1c4a4bf92b67ac8306", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779350382, "uuid": "5cf0958c-021e-4e98-8c5d-c85f65fce9e4", "comment": "Malware payload (Mirai)", "value": "b3a89cf33392269e48d33f58f8d2241e2987903a09a462561899748bc66c619a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779350382, "uuid": "228d385e-14c9-4702-879f-ca3792fb9775", "value": "T157C3180AFF910FFBD86FCE3706AD0B0525CC555622B93B3A7574D428B64A24B0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779350382, "uuid": "a6aa8758-e23f-49d2-bc7a-720e416d913e", "value": "1536:EyExOGmUG5mBwUFVHxZgZpquwK8BNSmsquJ2mZ1sZco8XUiCmW5QhD/TN5q5:RExr4mBT+Z8ImsqEb1sRiV52", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779350382, "uuid": "73af82a2-7313-4567-b128-2c4d8ae4ef17", "value": 118392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779350382, "uuid": "707970a7-7144-4122-8ece-65f2e1d30492", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03619a22-5513-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779367557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779367557, "uuid": "ee36ba13-d1b3-4bed-bd04-238d21d9e8c0", "comment": "Malware payload (Mirai)", "value": "5633464a72742d147d3abddd2bfb3701", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779367557, "uuid": "7fa3ac3a-58b3-4720-acc4-801cea89d2c6", "comment": "Malware payload (Mirai)", "value": "d6d460ff8279530b9ceafc7ca8ab5f92d762abb85c7e163788d3bafb5c53497a", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779367557, "uuid": "3eb2c0b3-36fa-4c07-9668-41e4050f7be5", "value": "T177933A91BC829627C2C8237BFA5E11CD372663E8D2EB3217CD225F16738695B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779367557, "uuid": "42dcfb49-a607-4383-93a9-9a14fe023315", "value": "1536:6vrXctngDh3CdoeLYxA8HuSE7C8CBfh3sXnikkkEmTUNFwoE1o0kvh:6vrXcUH1A8Oefh8XlRUNrsuh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779367557, "uuid": "72a0bf65-4cf0-416e-bdfc-e4074c0d5baf", "value": 89340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779367557, "uuid": "dbe118f5-33a8-43b5-bb83-b68f0ad48b46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9ce4f03-5513-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779367944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779367944, "uuid": "905f8c67-110f-4e1c-8f72-9d575c67b3af", "comment": "Malware payload (Mirai)", "value": "63a7a8c7f4fe8323685778fafe4ba267", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779367944, "uuid": "9c2b67da-d56e-4910-91aa-e02cecdccf6e", "comment": "Malware payload (Mirai)", "value": "8439f4c8284ae2ecb8a5ad0e3bfe18eac663f68090dc169de40979739c809c74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779367944, "uuid": "58a1efa0-7470-4df2-9b37-d43daa0b39ef", "value": "T138836D02732C0A83D4A35AB4293F13F5C7FBA5A121F4B789685E9B4E8275D370586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779367944, "uuid": "fa8592e4-9202-4272-989a-2b5473ac8c27", "value": "1536:H4LkseJ8EyPXA05YVekJklavVP+baAEiAQuUDkmJJc:HFKQzekulH5Nuakm3c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779367944, "uuid": "edab0b10-17e2-4e54-ae08-7910c492711b", "value": 87616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779367944, "uuid": "6645f5da-ab1f-4acd-bacb-f99a484916c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d471b6d-5515-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779368433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368433, "uuid": "cfb923d9-4630-478f-84a2-df8d9428ec40", "comment": "Malware payload", "value": "40a217ea8c8d0cbb06b6c450d0955229", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368433, "uuid": "1eb86e82-1c22-4606-b631-976a1472a78a", "comment": "Malware payload", "value": "2092008a3b94084f875b4e20a23d770a9c8cfc484b0de49674287ae27b1d412e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368433, "uuid": "c1ecdebd-10cb-41bb-b7d6-ef7b0dfced85", "value": "T1BF93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368433, "uuid": "fab2f882-b8de-4c28-8eab-b3d91d45c140", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXNIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779368433, "uuid": "da61d9ba-17e5-4706-a287-ba7f6c422f00", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368433, "uuid": "006914cc-a549-47fa-8a0b-1191b4e831e5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "603bfca8-5515-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779368572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368572, "uuid": "a3556d60-f378-4449-813c-f9f408a1c2fd", "comment": "Malware payload (Mirai)", "value": "7690106df2f4c4cab9a2162e303745b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368572, "uuid": "c83b9a14-afcb-4d29-919b-93b69e2c8972", "comment": "Malware payload (Mirai)", "value": "998326025ce9561ebc60a4e682e53e9dc58caf44fc0374080da95bd7a82a4287", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368572, "uuid": "6aa1b423-a894-4f83-adf0-4d98bb869cb6", "value": "T1E5736CC8EB03D8F8E90702B155B3F7339675E5750129EA93CBD9FA36AC126409A4B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368572, "uuid": "7dd2a1eb-54ce-49f0-b773-af267846619c", "value": "1536:NHFgPD+pEizbrJsWVqlDTgJXQdFmYQg0beetqbBBqrNRkUq35srJVkNtSG8Dvv:NiD+pEizfSWVGTgCIgauz0RqpsV6NXEX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779368572, "uuid": "d8f74026-c91c-4008-b7a9-c2fec50bf25a", "value": 78960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368572, "uuid": "c6ceca9b-ff48-43ef-8fa4-79e7afa72cea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61130927-5515-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779368573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368573, "uuid": "84a47243-6b53-41b4-8c74-328b3b35cc11", "comment": "Malware payload (Mirai)", "value": "da66b257dffd99be37fd84941520f048", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368573, "uuid": "7e49a697-7c90-476c-b8be-a8056cec5bf3", "comment": "Malware payload (Mirai)", "value": "554cf4ce479536e457fd1a563eeb39200d75c90bf70f97a03945dd759a173693", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368573, "uuid": "0b144558-7189-4fb2-84ce-8cc4578463a1", "value": "T1E8E33BCBF800DEBDF80AE73748530909B130B79144924B37725B79ABED3A1D91967E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368573, "uuid": "bc36ce2e-eb96-4cb2-ad99-db4424b679a0", "value": "3072:aVJyoz3smakOFSkkBJCLcZ5joyEVOjbiwLq0+Bhygp+I:y98kkkBULYjoQLCygMI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779368573, "uuid": "204b1fe6-90f1-4a1c-8cfe-2f559227a4cc", "value": 155372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368573, "uuid": "a183d9ac-c909-4f0d-af91-7a14a3dca958", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c87294fe-5515-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779368747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368747, "uuid": "4f8529c1-b0fb-443f-ae84-1aae48431404", "comment": "Malware payload (Mirai)", "value": "a5d878ff18d926281793830b8a086170", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368747, "uuid": "555ecbb3-7f18-4c99-9ab3-5c72c4b5f829", "comment": "Malware payload (Mirai)", "value": "3cda183f431e119df5d69c7598cbc1e7dbe4ba6f370b11eceeb4c1e5180c487b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368747, "uuid": "b5f229d8-f215-4116-996a-f0c6ad3f1450", "value": "T1C8B32C47BC429B12C5D622BEFAAE018D33536FB9E3EA3111CD205F5523C699B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368747, "uuid": "96ebce63-4e01-4bf5-927a-a039b6c3b7e8", "value": "3072:FoFE/17wjkxo1nhhal4VW7P2oQZVGvhzJG+39:5/Bw9fhal4VW7P2NZglG+39", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779368747, "uuid": "65a999bc-afda-41ac-b40d-0a0706452f5a", "value": 117632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368747, "uuid": "3ccbb5ac-7818-4468-bc0e-529495e33d90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86e29d98-5516-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779369066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369066, "uuid": "396536ef-3e38-40b7-abca-3c14377cb338", "comment": "Malware payload (Mirai)", "value": "2602926a50519bd4e92be32ceccb50ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369066, "uuid": "9b3b54b1-b1a2-4ff2-89d9-9255c688465d", "comment": "Malware payload (Mirai)", "value": "ce5530808e348d0fcec885db4854c4d9c9ee50058762663d7f7c7a8ccbe68846", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369066, "uuid": "c382dd00-46bf-4721-ac83-bbc06b416c02", "value": "T1CC739D32C4296F98D1801574E0B2DFB95B53B04882772EBB1BCAC96F1007AA8F55D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369066, "uuid": "125ecf15-e801-4ab0-848e-1a18686e9e99", "value": "1536:Ya4aIk0RAnwstNfOaOXkSK8tfjsVHMbjCKViQrADDl4JCtbs6:SXRgtNfXOXkS/fjsN+lVDoDl4Jb6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779369066, "uuid": "0a58111c-3c16-40cb-919c-989ee71a932e", "value": 79756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369066, "uuid": "95b4a239-4264-4f4b-81d1-36eaede07b6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b19e2213-5516-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779369138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369138, "uuid": "98953634-00c0-4fe1-86a7-259106b238cc", "comment": "Malware payload (Mirai)", "value": "0421f68cd882037151806dbec6d6a4c7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369138, "uuid": "54d42fcc-74c8-4209-a6d5-9412dbc3bc32", "comment": "Malware payload (Mirai)", "value": "bc4a4146a222b3681ff19d7c57d9ee299eea6b732736cd2d7da970e0adbf1d0c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369138, "uuid": "8f86e079-3b61-4354-aa7a-eedf4dfe8d6b", "value": "T1F8935B3279791B27C0D0687A21F78326F3F1534A25ECCA1A7D621E8FEF21A4025576", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369138, "uuid": "8698060a-bb12-432c-a749-bdb1a8d33e88", "value": "1536:uSaZ7SU7LIYv+Mk4VRN1YvznShJ7wa1JKqVwAtnesiCyVsC5Ftncve22n:Tav7LhpJ3ne7sSes", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779369138, "uuid": "eb0bdbac-60a5-4f53-96f3-d3086e5a5697", "value": 89520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369138, "uuid": "84da1da5-464a-4650-9d49-824a592fa8d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8ae8c81-5516-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779369150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369150, "uuid": "cd709545-8e1a-4546-a7ee-e01ace277fc8", "comment": "Malware payload (Mirai)", "value": "a4b11d787408f0da7a11c44403f62cbf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369150, "uuid": "11860aa4-3b6e-4a29-9960-fd72348713b1", "comment": "Malware payload (Mirai)", "value": "77e73b1d8f6530cf1f1901d983021c6e9a24a285d90cf2c4b09cc0ad92029e31", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369150, "uuid": "424185d3-50b5-476e-b062-693af090805a", "value": "T144B3F90E6E159FBDF768873407B38E36A39C238736D1D582D1ADD6101E5428E642FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369150, "uuid": "02659f33-2bda-451e-a70f-089a036c35aa", "value": "1536:GTrADpT8T8S8uzb/ZVuvJ2na/hu0YlJmD9m8MdeAZ4ehx:GvADrzuztVuB2nyhu0YjmD9m8MYehx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779369150, "uuid": "182adb39-22d6-4771-8a4b-b8967fd5d847", "value": 114404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369150, "uuid": "caeceea6-3e1f-411b-bc4b-9b9d850d13f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d70b5726-5516-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779369201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369201, "uuid": "96262fec-1a9c-435b-a328-936b6dc8775c", "comment": "Malware payload (Mirai)", "value": "890689df1ae27a7b193af6aafae060d6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369201, "uuid": "6f657055-814f-4370-b2a7-07c4f4627f1b", "comment": "Malware payload (Mirai)", "value": "fb55fc32443795c7fd145a309e53f513b4e480a75cfee683cf4e6ce3ad869f23", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369201, "uuid": "6a044603-e0cb-4206-9963-ac675cded16b", "value": "T1D2832991BC829616C2D423BBFA1E11CD332663E8D2EB3217CE265F12778695F0E736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369201, "uuid": "bc82af16-65b4-41a1-97be-560c00797919", "value": "1536:VcrvB05jzYBtI3iXibA88TeJjkc6BM3NP/+WU4mXZFlGtf8xVLt:2rvB056D0A8mRBO3Nn+WKZFoUxL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779369201, "uuid": "a5b9dda7-6447-419b-8f80-8ccb7e1d294e", "value": 87396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369201, "uuid": "d0b8a368-8bbd-4974-acc2-7e1aa51980a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1257eb8-5516-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779369218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369218, "uuid": "0de4646d-ee73-45aa-af75-113df0badd5e", "comment": "Malware payload (Mirai)", "value": "c7557f179866e028b2a838f5afc95b4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369218, "uuid": "a5c97a32-2f6e-41a3-aed9-a3a54a1a7a78", "comment": "Malware payload (Mirai)", "value": "93f01d5c3f49b6c4968052ec105d0a37f576ad4bcd5a915ad76a312877eadd91", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369218, "uuid": "913e13b3-6328-4769-b857-be2486daa6a1", "value": "T101934ACAF401CD7DFC4EDBBE44670909EA74E76221831F2D929BFDD369261984913E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369218, "uuid": "050fea2f-6abd-4ba3-bdba-1255b1f8cb31", "value": "1536:OV40opvt/+tNVEyY1whOMdmpP8PmCRiXsw1f8+ZVmlBk/1E9tNLeS8r/2t3w6v5w:OV40oqmyYgNmpP8g8w17VYg+Nt3w6Rw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779369218, "uuid": "211e1703-b6fb-4780-b469-3831191ad489", "value": 92428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369218, "uuid": "fc31651d-c6a8-4a9b-b375-f6afdf00dcf1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70a2c8f3-5517-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779369458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369458, "uuid": "27d6d884-483f-4d58-836b-8906a2f687fc", "comment": "Malware payload (Mirai)", "value": "2192a9be456c3862f78cd680634c11de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369458, "uuid": "d8201c08-293c-4a1d-b46f-dd4b6d5cdec8", "comment": "Malware payload (Mirai)", "value": "d32580070ea65dda2ac232dd00829c407d2f0fc53f1acdb4837328a38ad88983", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369458, "uuid": "7aac018a-d88f-49d2-a793-6fe391a0f7cc", "value": "T119A33B96BC828A16C5D4137EF91D018E33671778E3DF3226CD215F25338A96B0E7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369458, "uuid": "ce76a9a5-21bd-4153-94cf-ed4a9ffe55af", "value": "1536:ISnjsU6AS/LB5dexBfwAV4Nzkg0tI/1hE2E/ggr7+Hlwahit5nLMgiiPNJ/5dYWM:3+TB5wvn4NZHEYIiHlwahiPNJ/Ha", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779369458, "uuid": "f95df132-220c-4089-b4e8-1dcca7297614", "value": 100664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369458, "uuid": "15778032-afac-4ffd-8e7c-c012cb2044dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80a00c1c-5517-11f1-8974-82aee05be84a", "comment": "Malware payload (Tofsee)", "timestamp": 1779369485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369485, "uuid": "52038205-7e7c-4663-92a2-24209d8934d0", "comment": "Malware payload (Tofsee)", "value": "d6d27552a1057edcde9a1baf5be3dba5", "object_relation": "md5", "Tag": [ { "name": "130-12-182-175-8080", "colour": "#f2fa64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369485, "uuid": "6dd117fd-6ab2-4708-b562-1111907b5d8d", "comment": "Malware payload (Tofsee)", "value": "d98275ba5a7e5b15dfc3a8068cb91214da7a25f6d35219e20f7fcb6ca254e34f", "object_relation": "sha256", "Tag": [ { "name": "130-12-182-175-8080", "colour": "#f2fa64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369485, "uuid": "b9c8f47e-0ed3-42d6-82ba-e46ff2419bc5", "value": "T1F7B6F13B634A263DD06996352671E21F683F6D306DD28C0D96FCF478FBB6170192E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369485, "uuid": "3bb21590-86a5-48b6-8a97-5f4d44bdfda1", "value": "88016fcdef7f227c62171d0afad9aae4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369485, "uuid": "2dc47b1a-e2f6-444d-a95b-1bf67717b397", "value": "98304:25/ZYTgTI8DVqR04ozvVC25MDjq8jytokhtw:6kgTI8Rqm4oJo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779369485, "uuid": "096a4dda-7033-4563-aa5e-5bfff1dff2eb", "value": 10597724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369485, "uuid": "1e5756b0-c7f8-4173-81cd-f59fec08ff7a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc222265-5517-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779369639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369639, "uuid": "e6662121-620c-463a-92b7-bff9c7ca39ce", "comment": "Malware payload", "value": "b242b0c73b2b5f83939c180d7d2d4436", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369639, "uuid": "1aaab86f-0539-46f3-8d86-6d643eadea90", "comment": "Malware payload", "value": "2e757fe5a940fe77be29082b4d4827ab5a0c6f7753447dd71e8e076459023d6e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369639, "uuid": "5644ccdc-909c-4369-8ae5-b144a0eb6f34", "value": "T12C93087174AF152A166F835E80427B1CEBA982DBC600DBE8F4FD51195BF0D8933A76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369639, "uuid": "66681dea-57a9-4baa-a305-454f6e647193", "value": "1536:7VypTJruwMmAIa14oXorsOepeV7tb73WkAxCWlyG8B9S4potPgLLeKQTuK/mVSjH:7Qzsl+8yG8zS4potPgLL2TuK/WS+MJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779369639, "uuid": "e9d44a26-4089-4ea6-a090-9d168021fe05", "value": 92411, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369639, "uuid": "6d335c43-f7c6-40f7-8252-f23b1010f734", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de508801-5517-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779369642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369642, "uuid": "723c9ad8-25ea-4fa0-9325-ba3c32e018ad", "comment": "Malware payload", "value": "f876da13a3e8153a60aaac3c1225c951", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369642, "uuid": "e9e2908b-2214-4ade-b799-12848a1964bf", "comment": "Malware payload", "value": "bde66709643b0b8f500a7f3d5302dadf0d5d53504ebf1a63f91b90950c1e6b4d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369642, "uuid": "b100c75f-2f24-47fe-a8a3-9549de583d18", "value": "T10737337327641446E6A0C83CD63BFEE874F60FBEDE01987598A7D4C629279D0E6436", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369642, "uuid": "f042d048-e4a0-4e80-8884-b26b3e9a65c9", "value": "9174ab7ca09135e613f81e91b8718fe6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369642, "uuid": "ebf91b26-7f07-44a3-86d7-a894c6e491fc", "value": "393216:yffQK/DDOWNAvTmByEiWESSbLvKovBbOw4cB6P6dGd3PZf++kHVbK3g7wqZhV:yHQKnOWKD9KovBbOwNEIGd/d++qOgf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779369642, "uuid": "54e6a76e-c574-41e5-b41a-36ff698e8177", "value": 23732224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369642, "uuid": "5739e4d2-7d9d-4306-858a-4cebebbc681f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29f247d0-5518-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779369769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369769, "uuid": "493ec81b-e578-44bd-a5f3-9ea3a7aedb85", "comment": "Malware payload (Mirai)", "value": "0998596060f0e04f55967c3b63501075", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369769, "uuid": "8e86f78b-74c8-4924-84f2-697c65213bdf", "comment": "Malware payload (Mirai)", "value": "d1de962ef2822372b0db5c10360e8f21ba2401307c578df169e43271e0d60d90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369769, "uuid": "ccdc20f2-0b50-4ea3-811c-bbac0e906367", "value": "T1CDC31A41BD418B13C5C21BBAF7DF47993B22AA64D7DB3302AA187FB42F4769D0E1A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369769, "uuid": "d807f703-cec4-4e8d-920f-9f94e905f763", "value": "3072:K8h6MIJG0ABmiQ1pp7rSb6dtqvzEFPQlBD92Sx:Df0ApQPp3Sb6MzEFPQlBD92Sx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779369769, "uuid": "61ea13db-5b76-495f-ab02-63acdde7c005", "value": 122901, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369769, "uuid": "46a4b778-7c34-4ad5-8684-5898cc7c2fc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbb98686-5518-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779370041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779370041, "uuid": "dac990ab-4223-43d8-94b6-225a1738cecf", "comment": "Malware payload", "value": "2c1db72dff2910b7b3865f93f9d6a7b8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779370041, "uuid": "bf40bbf9-fe0e-4749-88b7-a899539a0985", "comment": "Malware payload", "value": "c2ceeb307257ec4b0ac315823cc54e09308708f3c023c4b87875f862304ce311", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779370041, "uuid": "7ffe1ddd-1520-4d45-b52c-978c0fb202e1", "value": "T1D38308327588582A210B028FD263336C70EFD8E3D611E5B6F6F522344BA5EE176B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779370041, "uuid": "dc7486eb-806b-4225-a78d-20b08c225756", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tLU3DXpdyr2pbnzWaJVN/:XEKltp9tLkX/yr2pbzWEVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779370041, "uuid": "6940034f-9966-4990-9ab7-5ac2be493afc", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779370041, "uuid": "ab2cf73c-d98e-406a-aef5-9f3284679c45", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84239806-551b-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779371209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779371209, "uuid": "f33399f3-86a3-4793-837b-c0887e766428", "comment": "Malware payload", "value": "5db3b9e4fb5c3816800f5440568c6855", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779371209, "uuid": "6474af97-70c6-44f3-b5ab-80a60a628d65", "comment": "Malware payload", "value": "f248ffb8229a8b5d752ddd238cf3c78d502532da05daa046ef2bc23a24b2ca34", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779371209, "uuid": "3aeddd99-2577-4fa5-a422-365980ddf6b4", "value": "T1EC42BFEA70924C137C521AC81F6F0892D25DCC62669A7F41D54A11ABFAFE5C2CD70F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779371209, "uuid": "65ad24af-bdcf-41a7-9e16-33f6c0007d99", "value": "192:6zyWjbcIc/vWIKRoi9WPvgRsUuqqA5qmtMwoz2jpEXHjJ7/jWvgTV2LUKEbs38:SPbcIeKRbWZvF1wr4jVdxXK0O8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779371209, "uuid": "d234138e-3e7c-4071-9e33-2be0cba36454", "value": 12032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779371209, "uuid": "a3b22ca9-4201-4712-8abe-7e3198283e78", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d72507df-551b-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779371348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779371348, "uuid": "90c73b81-f855-4d3d-b902-127f7893fb73", "comment": "Malware payload", "value": "0f5aff9e21538f8a76a06ad5deadd04f", "object_relation": "md5", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779371348, "uuid": "1f2df4bf-6f18-44b4-899f-f2f534897be5", "comment": "Malware payload", "value": "a569aba70b71ce9b24cd0134fed5a2157efdeeb66b09fdba4b382a81bebea083", "object_relation": "sha256", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779371348, "uuid": "834ac42a-5111-4540-a6e8-e3b3d3f0e39d", "value": "T12AE633E39B122121C1E6F7F73765693D1337666235F8B364B32EB64ADC8A0055F38A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779371348, "uuid": "f0588219-4cf1-429b-9947-ce71d4123b98", "value": "a413ffcb413e398d1f798a0daa527855", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779371348, "uuid": "013b7742-8266-475d-98e0-eae1e0c73e70", "value": "196608:wrU05q0sKYu/PaQrBu51V6TQscK2pUZMAbUEO3oDDJf6Wv/VJ8KnWWo37fYL4lSx:JhQrU51UgUSAoEO3o3Jx/VJWfI4lSk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779371348, "uuid": "b144b270-e841-484a-b848-3b11542ba1a9", "value": 15119539, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779371348, "uuid": "1f446875-4019-4d99-a908-a2546b91b0a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cfc4804-551e-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779372324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372324, "uuid": "84af5288-21d8-4f27-9774-03e879989a44", "comment": "Malware payload", "value": "a103cbd211011c36e9063be375ed0e96", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372324, "uuid": "ca32a608-40ee-4ca6-b4ce-82a0ba2fd249", "comment": "Malware payload", "value": "5060c4cef50899d8f1877aaf9db86d5960a6c822a6a297ca38e8f816b9e6c4fd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372324, "uuid": "ce21d80b-3086-4ff4-981e-2de9ccb544b1", "value": "T15262307038A0DA6F92A71EB9E2352F7960DDC65DD99BCD3873ACC5D10BC2C788E486", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372324, "uuid": "5ddff809-b51f-42da-9f4f-af8a2df0000c", "value": "384:57O0o6OI/yPvug3GD8pG5UoKiZWKidcKiTzKiD5Ed2tmUoD:57O0Hm7oKiZWKidcKiTzKiDnmUu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779372324, "uuid": "40249a11-5687-459d-8052-b39d4210901e", "value": 14606, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372324, "uuid": "3fb9a05b-877e-4f76-b899-2a8d8947f140", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6734678f-551e-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779372449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372449, "uuid": "323e5ed2-9b93-4b1b-885a-79ad86f6d13e", "comment": "Malware payload (Mirai)", "value": "3c552ce281ed14f32ca97c9a9e17e591", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372449, "uuid": "fc91143d-b56e-4586-ac05-77701103b8f2", "comment": "Malware payload (Mirai)", "value": "2f8bcd100590deeacc75f9d9632b9be3081457027faea6891cd54642725b70b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372449, "uuid": "b55ce0a4-9855-40a9-b1a2-641d1a752183", "value": "T14BC3F705BB611EFBDC6FCC370AF91705388C591A12F96B36B934D81CB94B21B1AE39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372449, "uuid": "c13ac34b-954d-4bcf-a5bf-d2d1de4d8711", "value": "1536:eEZOI0LSQ7ackP71oYcxVu3PJn6uFcz88NhSyeUlyhNIWhZmSdD8O2Wh:eEMIa7ac4qVu3PJ/y7h9oIWhf/h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779372449, "uuid": "47155f02-0fa1-49b1-8ec8-4a5abe36d5f2", "value": 118500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372449, "uuid": "0d53d567-ab83-48de-8335-8b9e73cef6fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b18b9d-551e-11f1-8974-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1779372609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372609, "uuid": "b4373c7f-c347-4ee4-ad53-db7b87f76552", "comment": "Malware payload (ConnectWise)", "value": "fa30bcf7a526f25c9e146d3cf58e16a3", "object_relation": "md5", "Tag": [ { "name": "104-236-198-16", "colour": "#422c2a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372609, "uuid": "03f00d85-b073-4bc9-b88b-ff3510cc65cf", "comment": "Malware payload (ConnectWise)", "value": "9477ccddefa6fd57cb2ab68a6cd77229dd2e2bf87f573e2b80eb60555d94e530", "object_relation": "sha256", "Tag": [ { "name": "104-236-198-16", "colour": "#422c2a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372609, "uuid": "8e88119f-8972-41f0-87bf-f0495304c4d3", "value": "T109647D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372609, "uuid": "e186f919-4285-4f50-9dd5-116c2c9a43c8", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372609, "uuid": "7c80f33d-96e3-4e9f-8da9-3aeb0ffb7be3", "value": "6144:ymlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9O:R1iw7gryNkSV1hy1Z1u2JLu9O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779372609, "uuid": "ef39954a-d910-4e14-b968-ac4cc56d1a7a", "value": 312544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372609, "uuid": "56dbe4c8-ffe4-4789-8c8d-9d501153fbd1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c832b242-551e-11f1-8974-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1779372612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372612, "uuid": "6a483749-a282-426b-b26a-894e0c01621a", "comment": "Malware payload (ConnectWise)", "value": "af94e3e70bd94e245430c34c8e9ed64c", "object_relation": "md5", "Tag": [ { "name": "104-236-198-16", "colour": "#422c2a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372612, "uuid": "ca235740-8cf7-41d2-ac0b-dc663e67de3a", "comment": "Malware payload (ConnectWise)", "value": "b831f47ee0fedb819d1060a68fdfe4500d2a1a5f18f5e613fe8454c452626c48", "object_relation": "sha256", "Tag": [ { "name": "104-236-198-16", "colour": "#422c2a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372612, "uuid": "4e4af5b0-5f0a-4c0f-8243-0c11896e4054", "value": "T18146E101B3D695B6D1BF1638D87A52656734BC049316CBBF5394BD392E32BC04E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372612, "uuid": "bb3b6d1d-95fc-4398-8321-c22a727786e0", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372612, "uuid": "8bd72612-a2d1-42f9-8024-f11b007f15d7", "value": "98304:LzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJ9zl:LhfefPtHxcp9ym3nltDUJV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779372612, "uuid": "a56f0047-ea82-48ce-ba66-e1fb6fd80f5f", "value": 5662256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372612, "uuid": "2a96f712-b975-4348-ab85-595679415046", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe38fc61-5524-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779375279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375279, "uuid": "0edc56fe-d089-4da5-960a-01ceaa39ed37", "comment": "Malware payload", "value": "77b52a0862cd46192b75f982ce1da259", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375279, "uuid": "b5db2d24-a2cd-4a38-8aff-15f5763e167f", "comment": "Malware payload", "value": "a4f65db6f11c4c1b6d604b63a2d563664cf058b6d9e54618829e7a6e31205c26", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375279, "uuid": "b818ac6e-1d0f-4719-a5a3-bce378c5e5e0", "value": "T127F3CCA7330086BB6D7A88ABBF2588D950FDFF10039170E2EE4A7D94D8A4747C0E56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375279, "uuid": "96bfd80d-652a-4370-80e5-df9039b2e229", "value": "1536:Royy9DnWINI0ix9/pD4WIIkzK4ksdm2hg6KduadtK3Yst9yUSfTY:Royy9jNI0iPl4WMzrHdmuFobkYsaTY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779375279, "uuid": "8928d247-5603-4f17-8a27-c2599bcada68", "value": 169748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375279, "uuid": "44bef7a9-4a0f-4a52-8a5e-6e29f408c169", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe7d6074-5524-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779375280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375280, "uuid": "4299fb2f-6a19-4e5e-b3c4-f4f69ea02fa7", "comment": "Malware payload (Mirai)", "value": "faa9a18fab1a2e7141fd4541aa795b61", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375280, "uuid": "526d1ad8-ba3b-46fb-a968-765274dad74f", "comment": "Malware payload (Mirai)", "value": "0eb6a40b077562a2d2d11f89e25958262c409e8e4f239bd7ce3ebf1cc289b9ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375280, "uuid": "bb06a9b0-1e86-4ea5-9883-f24854c41f68", "value": "T19D1302CAF4F58350EC773E331EDDB20A2150691C69AD817AD4D2760AE03AF8C5819F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375280, "uuid": "f0b04943-0949-4ef6-9a18-f5a7cf1482fd", "value": "768:fImhn9jpEscPBTZ8YsMX0Gj2N7ljyUo+6u4Rm1hAbS2qqvifnbcuyD7UGQRjI:v59C1PtWYsO0GjCjh4oqBT0nouy8GyU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779375280, "uuid": "a6ebb3bb-752b-410f-8e5f-fd719e029432", "value": 44776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375280, "uuid": "924afc2b-4dfe-4b4f-bfa0-fa4038f4adec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "616026f5-5525-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779375446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375446, "uuid": "bacf01c1-4699-4b8d-ada3-32879dfe8fe8", "comment": "Malware payload (Mirai)", "value": "f9afa1af9603bdf3d23a1ddca3514386", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375446, "uuid": "f16e4e96-642e-4eb0-83a1-2f99cbfe2643", "comment": "Malware payload (Mirai)", "value": "d1b1d2778d1ca137efea7b8e3e33ddc1ab59cd7771866b3214a9535b3bc6c674", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375446, "uuid": "17dd68cc-33d2-44f9-9c01-e68e956b1ca5", "value": "T135B2D060B757B8F0C2B841369DBE808662F54C30E29C7827542513B5FAE7B8681F58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375446, "uuid": "11cb48d8-dfb3-4409-b47a-42429b0149ba", "value": "384:fqQVLpixm7ja0yR4NVmd9wK9DhnuCc5B7CQGXEOqlk5EwXuvhymdGUop5hIH:flI0dVgqShu9ZgXEdkLqs3UozaH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779375446, "uuid": "664207c2-f4f6-43fd-8d24-7447dc1f67e8", "value": 24660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375446, "uuid": "53a3c083-bb5b-49a3-9795-22d6d3cfc7f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b88f2c6-5525-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779375463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375463, "uuid": "0259b0ef-336a-415c-a98b-9c47b26e41e9", "comment": "Malware payload", "value": "ff4c566fd66e4c062027c3f9744103ec", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375463, "uuid": "a61696ef-37f9-46f0-9bce-9f0ac62c51fe", "comment": "Malware payload", "value": "9428bc7c8a105d40ab25634715d3a5fd22b94952d9ddc4314b572d7f5b653fb2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375463, "uuid": "f988d604-329f-45c6-afff-c9a531c807cb", "value": "T15752207CD5E6FCC0875B62D0B9ADF6D2118E8B13BE621B6CF5D804510B00395AFB95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375463, "uuid": "d97d946f-983a-4a67-9a33-b4f9d52b7741", "value": "384:yNHBo+1er/mGxW3yknKXohuOognqvZHkIFO/DP6cwC:YODjk0owOogn2HkpDtN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779375463, "uuid": "e24f0fb4-596a-4cce-938e-79cac1585f5b", "value": 13863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375463, "uuid": "960e9a11-6dee-451a-855f-75dfc00294b9", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcb2bb29-5526-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779376028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376028, "uuid": "1a18bcd3-95ea-4298-8246-181331555045", "comment": "Malware payload", "value": "08c04638e0a16dd25310b5ebd47cd817", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376028, "uuid": "a7104e7a-2495-4906-ac63-436b904017bd", "comment": "Malware payload", "value": "bc347177d2aea00418ca3e1cdfd779283a11f4bf29fd43f413c1571fa261f4a3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376028, "uuid": "24aa2d95-c7eb-460e-9fdd-12d5e8aea899", "value": "T16594DFB74FF22628C6AAF360D61A5C164F3590FB3CE220486F5C57C909D625A6CEFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376028, "uuid": "b327739b-7ad5-4656-a2fb-56f1f9735734", "value": "6144:u+67b16kewJan57A63YKzjrPT2/QXTBPgP5R0FtgHT/1ch8poZ1LNxhv1qyQXv2t:41bYBA6zzjrPT3X6P5RF7m+q151qyt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779376028, "uuid": "e212cc4f-f71a-4def-a440-bdc43850f7df", "value": 432588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376028, "uuid": "99d7a2d3-c95c-408c-955a-570837dfcea8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcbbc1d1-5526-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779376028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376028, "uuid": "95fbaab3-ea49-4552-8c96-cbd553f580e1", "comment": "Malware payload", "value": "23ef1dfd1223be861fe706638a152410", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376028, "uuid": "1d7f37ec-450b-42b2-a90b-fc893e3f7663", "comment": "Malware payload", "value": "e0b636c2bd3656fa4791749ee1ad503ee9a85a6c694fe0b7e269bbc2de31d2b5", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376028, "uuid": "cce69ae5-224f-43d2-ae22-52a7c3a49ac3", "value": "T17BB423B776D00CA662A7009C01C237B97F4D01C9839A7CA521F4BAADF93BBC91F516", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376028, "uuid": "b9ef5afc-11f2-45ef-a9d7-49957e591420", "value": "12288:JcFqEpYjuxAS1vpKUfRHW0SuLpp+4IqvJCdv5XB2zYuVkLvolH:eFqEpbKSRp5NdLpp+nqROvQVVuw5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779376028, "uuid": "984d0e66-561d-4bcc-baae-8101692c6487", "value": 526400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376028, "uuid": "6467e1ff-ecc3-4140-b4d4-9fd8838b2827", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bce43855-5526-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779376029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376029, "uuid": "82ff5124-4d2c-4432-9fe4-51cd661ebbc4", "comment": "Malware payload", "value": "641ef659a66b71c697e79dff1cdcdcd5", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376029, "uuid": "33a8a2f7-2fe0-4805-9f74-2630e97df2e5", "comment": "Malware payload", "value": "ed089dc62b8b87ab8a812e667b2ff5e0ecbaed0eb2e67031a3ae9fc29efc293d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376029, "uuid": "0b11cf44-7a48-4830-ba92-820a65e86c57", "value": "T174B4573D678769DE0BD62808E53D1DADDE0394A3C6746A812A4E477BD8B3DEC427C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376029, "uuid": "8e3d1cc2-2ecd-4966-bd00-da1ac31031bb", "value": "6144:dC2ZXq6wEEcUBD1MfZPAhEp6h/JURcqspqfgpae0xHGtypVFykbfDoCm7x6liFLz:tDGktgJUReke0xsWDm74sw9R6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779376029, "uuid": "7a64cc24-d020-4c1f-8517-46af527ee905", "value": 500648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376029, "uuid": "c9a276fd-1473-47e7-bb86-2810f055b14b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba4e5245-5527-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779376454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376454, "uuid": "f921f40b-0a16-4547-b040-22b15d20be52", "comment": "Malware payload (Mirai)", "value": "ce09b7bd15d32216b0b7262fa976cbcb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376454, "uuid": "8b835220-1965-425e-823a-4fb47f04bd9c", "comment": "Malware payload (Mirai)", "value": "8560300073390e711aac553c24170e3b6d80a875881373d9721bf05a922c5f1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376454, "uuid": "02b5a87b-ddec-45d9-b13f-5ee9de1dea68", "value": "T19A4302F997014DD8E72965FF06AA0BD71F1529A3AC00EC5D8F11A1D0CB96A9068E2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376454, "uuid": "17317277-9877-4b00-a523-5927be4dd3ed", "value": "1536:7MzTH8VKWayJQCL+bpPC4yFaItniaacKVJuu:/RJf+bpPCJMLVQu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779376454, "uuid": "4bfbd9a0-4525-4d1c-b2d9-5a98c46d451b", "value": 59840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779376454, "uuid": "5d17cd95-0d9a-40cb-99f7-868e60216327", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d7051fb-5529-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779377050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377050, "uuid": "2ef6fe7c-7378-4816-bb98-1c24c00cc050", "comment": "Malware payload (Mirai)", "value": "a88ce4f8b5a256d85bbb58f043207b73", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377050, "uuid": "19e4ea24-2879-4c4e-b376-c3bad29c4970", "comment": "Malware payload (Mirai)", "value": "4edeaabbecb0eac98ab1f84594f8f353e2bbb7f93dfeef95a5f8ed1778d56ad3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377050, "uuid": "f64f4ca0-359a-4305-96de-46a3e887633a", "value": "T1C043F123AA536400F36029793F599FA70B431FBE81D93D17916827D17A93B58CB383", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377050, "uuid": "7bc07c37-b5c3-4d67-89f5-75f2c914f0f6", "value": "1536:4mcTNb+XHROC8udziixbUf0/wYkZPvtGIbi5zizEvmYzd:4LTg3A30ziiNUgitGIqizEvp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779377050, "uuid": "f2e08a6c-d7c9-41ea-b68d-2a07f8b65297", "value": 55336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377050, "uuid": "7dd9881d-cb3f-4117-bdf8-8884aa0cc2c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20bd08a0-5529-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779377055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377055, "uuid": "28deee78-2bd8-480d-9de9-b776fc7a9132", "comment": "Malware payload (Mirai)", "value": "99c00ccd6b4f05dd531cc9471cfcc590", "object_relation": "md5", "Tag": [ { "name": "104-248-119-34", "colour": "#2ba4a1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377055, "uuid": "cdd2e790-1aaf-4677-86a8-f662420304e9", "comment": "Malware payload (Mirai)", "value": "14eb6338704c4a6ffc5d9a9cd44bd9b8bbeb3f8820fed1c75deed3f40a926449", "object_relation": "sha256", "Tag": [ { "name": "104-248-119-34", "colour": "#2ba4a1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377055, "uuid": "fd436e43-d90d-400d-ad03-ad29379ea9f7", "value": "T144856B4AEF45CD7ECA580670CCFB4B387737E0A81B06AF2B259D91343C93759AE468", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377055, "uuid": "bcd74a62-bb16-4b63-8c3f-26d9171d8766", "value": "24576:0VHVcdstbxgp/O0kpCSunma41ZF1cq54hsZB/vi9DrW1qXuEPYi:0ostbxgp/cbKXgaY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779377055, "uuid": "4f453033-d49b-4368-bd8e-dd9433901282", "value": 1862336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377055, "uuid": "4c486493-9ccc-44a0-a1d9-11c93b1fd435", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7867cc3-5529-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779377308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377308, "uuid": "c83ce522-a2c1-48d2-be68-f57fc94cb177", "comment": "Malware payload (Mirai)", "value": "42ebe4424d943a95d587b88e0196e6f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377308, "uuid": "97ef05bb-343e-4fc1-9988-405e021ed6ce", "comment": "Malware payload (Mirai)", "value": "8f943c642bac43a1bc94be45bfcf6801b42f574db21c6a4184480cfe9c52198b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377308, "uuid": "400bf3c2-3690-4599-a2a9-29a132c06b7a", "value": "T12343F1574520EE81D5910A78E6FCC6433AC36D38A5BD24722AB0535DB9CD3CB84AB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377308, "uuid": "8c08d9a0-ddc6-44cf-8d38-3a2c4379e289", "value": "1536:apcikAM6R81jhQE2S/hNZGxABj5AwTWXrANLf:ac7xhLWAt0kNLf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779377308, "uuid": "b522de08-dc5e-43a4-bab3-4705f808a0ca", "value": 59572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377308, "uuid": "97229059-c78b-4e38-8e83-f9ea63d06cbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f12efc5-552a-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779377697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377697, "uuid": "96610d63-e40f-4a04-b9e5-8db00d746d1a", "comment": "Malware payload (Mirai)", "value": "36223a3d8b6fe3087c79d25a2fd34ff4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377697, "uuid": "92cf7a2b-7a8c-4aae-a29b-eaedbe195924", "comment": "Malware payload (Mirai)", "value": "04e5685159715f5ce3a58681274423f997f06700549d4f236fab135dd3e4c880", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377697, "uuid": "83ddcbc1-e36d-4214-9ca0-07ae8d1261c3", "value": "T1F4F34BD7F801DDFDF81AE77748430819B130BB9250824A376267786BFC3A1E90967E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377697, "uuid": "c0c08b8e-2947-4d24-9bfa-f2c00e2736a4", "value": "3072:nIdOEESiVcB712fsSWQLDzzmZOVOjbiRLr1sBFykFg0:BEYnfsSVLLmZEL0ykG0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779377697, "uuid": "11837feb-b245-4511-9184-e3686a6f8e1e", "value": 163724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377697, "uuid": "723964cf-f416-459f-96f2-771bba939e7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09233729-552d-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779378734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779378734, "uuid": "800d2bba-7c82-4c77-9f89-36c061bf1416", "comment": "Malware payload (Mirai)", "value": "7b9f3f3a76124888248e0c8175101095", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779378734, "uuid": "d5cbf3c7-2bf4-4035-b596-ef2e549249a7", "comment": "Malware payload (Mirai)", "value": "8daf428514955b2e86b939db3cfebb27277186c9de431bdba7b2692ad1e5262b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779378734, "uuid": "0d950544-6acf-4384-9cf6-9a3ae74dd8b6", "value": "T1B37302316714FC99CF11483DB9DB5BB6A85436D1F0E8913A2170D2E4E60C709AAB7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779378734, "uuid": "04bd9f0f-ecb9-441c-adee-eae9b7240ddd", "value": "1536:Sb2khHWwucsrAF3haNEjzgwPRwlcrhN3zLJUnKV7w+jrgv6KIS:ZkVW3rAF3haefZucrh9zL38mgv6KIS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779378734, "uuid": "fee5535d-9fc5-4bd4-a8d8-3e89717894c3", "value": 73416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779378734, "uuid": "6e8523b5-8a9e-43ac-a7b6-d69d01d70323", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97b6bd23-552d-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779378973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779378973, "uuid": "7f3717c3-2fff-4964-b4bf-bf8352fb6fbb", "comment": "Malware payload (Mirai)", "value": "068a93c16a2a0b23898993555a2286c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779378973, "uuid": "26d9dbc2-866f-49f6-a325-04dce2c74416", "comment": "Malware payload (Mirai)", "value": "dd7e8eecedf606be9a29653148e0ca6cc142a8f12b37dd06009a84ee7de6b3a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779378973, "uuid": "cf927055-87a0-460e-a5c2-d020bf584670", "value": "T1C753023FC4E0A789C82EFCF523CE5F741E85F2A1578A7E20AB141D1D9A994D6BE060", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779378973, "uuid": "b6176232-48b8-4994-ac87-afcc16b4c5ec", "value": "1536:tct/LtdhS5W2SbvZkrfpyFpBVzHB4zJnNbdFEQsZ:t67hoZ4BkfMpvzqntA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779378973, "uuid": "1dd8f54d-edb9-404d-aacb-ace737c0b6cc", "value": 61948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779378973, "uuid": "6e3c4708-7658-4b29-b2a7-46baa221d4fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d972cb7e-5530-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779380372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779380372, "uuid": "86bf7ade-cf69-465d-bbe8-3b61295dee6b", "comment": "Malware payload", "value": "e3c03e907c30780c08897ffb877a21bc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779380372, "uuid": "28687f70-766b-4567-9130-a8da9c4975c0", "comment": "Malware payload", "value": "77d09be14f86124594de9a29fd7856b63a8a898593d85087237ecaa5db8164e7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779380372, "uuid": "3d7954ba-bae6-4b34-bc24-823a3d366d2e", "value": "T1BE732551AF3D301BCFDE9B855E28BC510C2DCB51A0BA81E1564B8CAFD85F944A8A4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779380372, "uuid": "7e8b42b9-4bfc-42c1-8ef4-deea4675e713", "value": "384:s4+1Y4X6PaXUOAW9sbNGaSK5uMDI9z1GUYgXH/Z5dTPMRwA5MjThfzOxwt:s/1VKPaXDAWEGak0ixnTP+5MPhaxwt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779380372, "uuid": "a5d1792c-28d9-4b12-bccb-fedc7004a7f1", "value": 80598, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779380372, "uuid": "8698eb53-b1c6-4e63-8ca4-fea719d8ca73", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0595732f-553a-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779384311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384311, "uuid": "39a0f4d5-149d-43ff-b7f4-17ad9d7bc090", "comment": "Malware payload", "value": "cbe0daeec71e47840672d930e112d467", "object_relation": "md5", "Tag": [ { "name": "ocx", "colour": "#4de83f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384311, "uuid": "d0329060-ec18-4501-935d-82c6224bad45", "comment": "Malware payload", "value": "c4e55e9e6837de01f0dadc7db299abd48630bf115a442f09ea0c6a593c559e6f", "object_relation": "sha256", "Tag": [ { "name": "ocx", "colour": "#4de83f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384311, "uuid": "5c2cb810-c7a5-47c6-a92f-369590a5d0e7", "value": "T161F54B07E1A3509DC16BC074CA6AD772BA31B81D12B07A7F2A94DBF12F21E50B75EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384311, "uuid": "1fb600dc-ff91-4733-9b5a-8dbcfff9ff84", "value": "e110df2bbe686712b8bb201598c5df44", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384311, "uuid": "d539a161-34d1-40f6-b819-05346c3560b1", "value": "49152:rqxnq+8GcD4lFxeNZLoBewXvAva8L2xX971LKYIAaZ4Uay:kdDUL0hIZL2X1LKYIAJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779384311, "uuid": "96781898-01b6-474c-af94-b622be285525", "value": 3528704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384311, "uuid": "a6aa1bfe-2799-4cb4-a028-a9245550a143", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d9255fa-553a-11f1-8974-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1779384485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384485, "uuid": "a1adbf2c-7841-49ea-a70e-5a527179b5e8", "comment": "Malware payload (Mirai)", "value": "9da45fa17a4770f2c1b6a68bb39ff3f4", "object_relation": "md5", "Tag": [ { "name": "176-65-139-166", "colour": "#5da92d", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384485, "uuid": "7ebd7e08-a986-4f85-b029-dfba41aea5b9", "comment": "Malware payload (Mirai)", "value": "6a41023f7e6c466b2e17ff09d856f2ef6f4f83165c78ebbb894ff4e1d6e1bf53", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-166", "colour": "#5da92d", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384485, "uuid": "c72bc2af-c9e3-491a-9c49-8669637dea36", "value": "T130762711FE8B50F2E9031D3105ABB26F63325D054F29EBE3EA407F29F97B691193A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384485, "uuid": "f066d759-349e-4e0c-a2bb-db4a90ccd118", "value": "49152:fDcg444mBP+v3bUbRSkJiZu50cwOXT2VDDD4EvEuN2SD8LJNWUhHEvmCLpR5ELf:L+4vq3QbRSP9ODiDoEv3mZbsELf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779384485, "uuid": "206a6a93-b465-4e1f-8435-6d527b1b5500", "value": 7270584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384485, "uuid": "a377074f-0598-4e51-bf39-89192cd9e012", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1899109-553f-11f1-8974-82aee05be84a", "comment": "Malware payload", "timestamp": 1779386828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1779386828, "uuid": "bd4fc54a-54e8-4b41-8496-2c59c0841578", "comment": "Malware payload", "value": "cb7569803c981f18d9e0756f0032b81d", "object_relation": "md5", "Tag": [ { "name": "e73f7ff7572070d56a631ac6796adabd", "colour": "#472b51", "exportable": true, "hide_tag": false }, { "name": "limidos.com", "colour": "#b2b00e", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1779386828, "uuid": "392eb3e0-244e-4b2b-86fe-51b20a15aaae", "comment": "Malware payload", "value": "8025aa354a75a00ec1d6036afc1e43771bc8847f189735df1c46ef7f1ea59e27", "object_relation": "sha256", "Tag": [ { "name": "e73f7ff7572070d56a631ac6796adabd", "colour": "#472b51", "exportable": true, "hide_tag": false }, { "name": "limidos.com", "colour": "#b2b00e", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1779386828, "uuid": "cadd14a0-5c72-45db-bb3b-a418a4524093", "value": "T1C5058CBB4372CE9A1F6D1FA49504068DAC68DC97E4EC03FC2F439C7582F65905868A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1779386828, "uuid": "e8ad4344-8003-4ca6-b5af-1a1876414945", "value": "24576:Rpcmz+UioTFbTa83Cjyu67XiN+ZbCdf23s/K:Rphn8iisZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1779386828, "uuid": "46922291-9151-49c9-a2ef-75836da5fd31", "value": 866004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1779386828, "uuid": "9dd844ef-b0b2-4f6d-a80e-1183d698319a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779321621, "uuid": "0f4e715f-54a8-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.42.49:42416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779321736, "uuid": "53f027e1-54a8-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.74.148:49905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779322337, "uuid": "ba688812-54a9-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.118.14:44797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779322399, "uuid": "df2f458d-54a9-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.56.76:36157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779322513, "uuid": "22cdb713-54aa-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.118.95:55238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779322627, "uuid": "66e48df9-54aa-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbital-velocity.fit/98a1df5c-d42b-4208-b5c1-ab4d41d96217/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779323055, "uuid": "65e51384-54ab-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.42.49:42416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779323176, "uuid": "ae304d1f-54ab-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.56.76:36157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779323479, "uuid": "62e8df7e-54ac-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.118.14:44797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779324547, "uuid": "df3ef4e6-54ae-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://bakingstonetheory.fit/15dfc7e3-ff49-4028-a50d-13fcd1d61104/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779325028, "uuid": "fe0b91f0-54af-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.215.232:34588/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779325163, "uuid": "4e8287fb-54b0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.98.73:58421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779325271, "uuid": "8ede061e-54b0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.15.197:51770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779325401, "uuid": "dca393a6-54b0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.15.197:51770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779326360, "uuid": "17e6bf6a-54b3-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.98.73:58421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779326649, "uuid": "c41e2bf8-54b3-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyber-prosthetic.fit/eee2f6c7-ef09-4838-8901-8e33fb759171/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779327368, "uuid": "70e0e713-54b5-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.160:46937/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779327547, "uuid": "dbb07d4d-54b5-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.46.52:51721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779328222, "uuid": "6e2eee90-54b7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.127:45282/Mozi.m", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779328223, "uuid": "6e42695b-54b7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.127:45282/i", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779328224, "uuid": "6eedc290-54b7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.127:45282/Mozi.a", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779328226, "uuid": "704a72d6-54b7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.127:45282/bin.sh", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779328227, "uuid": "71037118-54b7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.32.254:41475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779328508, "uuid": "18342933-54b8-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://ntm4xnw3.renaissancefrescorestoration.digital/?ublib=074378f2-badc-4a74-b9e0-91ff2a40745c", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779328809, "uuid": "cbcf3fe4-54b8-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://chickencutlethacks.fit/7322572c-c26a-4597-9a93-65fdebc11653/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779329002, "uuid": "3eaa9617-54b9-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.46.52:51721/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779330728, "uuid": "434f4ab0-54bd-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.21.95:58951/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779331151, "uuid": "3fe914f3-54be-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://abyssalkraken.fit/594c0340-e897-4ef6-856a-16912f1ae821/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779331152, "uuid": "4097402d-54be-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/OutsidePantherPucker/shngmkfy/releases/download/urgant/123.exe", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779331876, "uuid": "ef99b97a-54bf-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.43.107:60676/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779332107, "uuid": "79d1471a-54c0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://abyssalkraken.fit/5763dea5-3ada-47fb-b605-646ec5e417ac/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779332477, "uuid": "55f1240b-54c1-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.185.74:43516/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779332647, "uuid": "bb39e4c0-54c1-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://abyssalkraken.fit/018b89e9-79eb-4aa7-afba-edc294d38766/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779332766, "uuid": "0278a9f3-54c2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.21.95:58951/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779332951, "uuid": "70851c95-54c2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.179.144:33313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779333312, "uuid": "47d0a2c3-54c3-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.43.107:60676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779333427, "uuid": "8c7cb471-54c3-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.230.56:39756/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779333670, "uuid": "1d6e2c81-54c4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.130.160:51391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779333850, "uuid": "8863e4b7-54c4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://abyssalkraken.fit/6012f3d4-316c-45ab-9481-14c396946301/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779334208, "uuid": "5e102d50-54c5-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://telemetry-orbit.buzz/af1f4e1e-919c-46f6-90e0-092da270a594/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779334213, "uuid": "60d1b9d4-54c5-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.179.144:33313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779334573, "uuid": "3742f1c4-54c6-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.80.46.95:40553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779334626, "uuid": "571ad722-54c6-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.81.148:54944/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779335288, "uuid": "e166658e-54c7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.91.149:48942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779335467, "uuid": "4c72bd95-54c8-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://regexcar.christmas/784faaec-059c-4fc5-9812-5df35c549fba/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779335647, "uuid": "b7718b1a-54c8-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://okb0lvez.subdermalbiometricchip.digital/?ublib=48e0d0ba-a30a-4710-bf8d-2c181f9b94ef", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779336187, "uuid": "f942fd87-54c9-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.91.149:48942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779336368, "uuid": "6551b35c-54ca-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.166.119:45562/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779337566, "uuid": "2f2e8284-54cd-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://hasmysql.christmas/fa603fda-db92-4076-9c6c-a89fa306b822/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779337566, "uuid": "2f2f16f2-54cd-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.80:51745/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779337926, "uuid": "062d5270-54ce-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.166.119:45562/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779338948, "uuid": "66e46a2e-54d0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.10:42828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339008, "uuid": "8ad38dd6-54d0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.230.56:39756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339070, "uuid": "af8977cd-54d0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.207:49457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339618, "uuid": "f6a7077d-54d1-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.220.160.50/prism.ppc440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339725, "uuid": "3667f006-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_1b59b8f34ac01b65.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339725, "uuid": "3677537f-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_469080b13781a71e.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339725, "uuid": "367858d0-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_44b6595cf70d3f32.dll:::ddd", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339726, "uuid": "36966f12-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.110.50.15:8089/borlndmm.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339726, "uuid": "369af230-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://gardeninfrastructurecore.garden/80ad8f13-a651-414f-8be5-0252e6fd5ad0/ggl.bsc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339728, "uuid": "37ee62ce-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_f63a4ae1cbc0bfa1.exe", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339728, "uuid": "3847f421-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.126.176.23/screen/panel1.vbs", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339732, "uuid": "3a1de8cb-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://klichkogov.pro/3Armyeu.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339732, "uuid": "3a43e91c-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_2e4e1082336e95de.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RemoteX", "colour": "#6d8996", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339733, "uuid": "3ab53a03-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaci-cloud.b-cdn.net/Python.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339750, "uuid": "450b4b35-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://gaviao.ba.gov.br/DocumentoPCPE.exe", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "pccvill-com", "colour": "#6ed8aa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779339792, "uuid": "5e54a4c7-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://gotextileltd.com/gotextileltd.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340027, "uuid": "ea1e6d56-54d2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.232.20:44058/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340391, "uuid": "c32ee35d-54d3-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.10:42828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340581, "uuid": "344ae0f5-54d4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.135.4/21/sccw/verygoodpeoplesaroundonme.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340581, "uuid": "344ae67c-54d4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.135.4/21/smallonebutgoodoneeverseeninmylife.js", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340625, "uuid": "4e9ed657-54d4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/HGXDbdvy/raw", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340626, "uuid": "4f151189-54d4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://hasteb.in/p0PJpF32vD5A4rq", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340698, "uuid": "79e8affb-54d4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.152:37802/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340745, "uuid": "9673ab29-54d4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/remasd-6c702.firebasestorage.app/o/frost%2Fpic2.jpg?alt=media&token=589f956e-d019-4472-a000-29f8eb203489", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340821, "uuid": "c355b60b-54d4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.55.77:34550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340879, "uuid": "e65ed13a-54d4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.225.38:50228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340929, "uuid": "03b053d6-54d5-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1Nu2vVY7NpzX7U2sUN8smCfP2sAsdUmAa", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340930, "uuid": "044587dc-54d5-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1icI2Ryfs-geAnAFmuH0MkfY02fB9b7pn", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340940, "uuid": "0a4f24e2-54d5-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.54.102.150/j.php", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779340990, "uuid": "2842f8fb-54d5-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.227.52:37703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779341410, "uuid": "2284985c-54d6-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynga.pl/common.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779341526, "uuid": "67f23eaa-54d6-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.20:46474/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779341781, "uuid": "fffd5406-54d6-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.225.38:50228/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779341900, "uuid": "46a27386-54d7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.70.88/Ihhsp.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779342012, "uuid": "892716ee-54d7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://freeomovie.info/wp-admin/valliere.asi", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779342185, "uuid": "f06359b5-54d7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_3588ac55bab70f4e.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779342675, "uuid": "14bd9e07-54d9-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.227.52:37703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779342908, "uuid": "9f6ca3a2-54d9-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://td5323u3.primordialsoupevolution.digital/?ublib=9482e39b-e389-4095-9851-37ec26ed5c1b", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343029, "uuid": "e7d67aa5-54d9-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.254.233:46366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343091, "uuid": "0c8c9286-54da-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.152:37802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343327, "uuid": "98f40e82-54da-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.254.233:46366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "28784d01-54db-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.217/public_files/Dc0Cl7b.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "287a0b0c-54db-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.217/public_files/l1KlQA3.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "288029b8-54db-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.217/public_files/DnMN9TT.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "28837884-54db-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.217/public_files/160066.jpg", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343567, "uuid": "28888b3e-54db-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.217/public_files/FT4neuK.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343568, "uuid": "2897820b-54db-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.217/public_files/FcljU2b.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343581, "uuid": "305a7083-54db-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.14:59263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779343927, "uuid": "feabd431-54db-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.103.251:59130/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779344120, "uuid": "72132f2c-54dc-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.14:59263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779344234, "uuid": "b5a8046c-54dc-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.167:37858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779344347, "uuid": "f9643514-54dc-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.116.140:44670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779345196, "uuid": "f3701ed3-54de-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.228.139:52437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779345667, "uuid": "0bdc8ef1-54e0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://hasvideoproxy.christmas/4ead1c02-748e-4ea5-ad16-f2496948e8fc/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346026, "uuid": "e1a89c50-54e0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://sites.google.com/view/newversion20", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346026, "uuid": "e1fdb93a-54e0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://sites.google.com/view/xclaudeversionmac", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346158, "uuid": "306faa83-54e1-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.75.16:37520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346290, "uuid": "7f191203-54e1-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.16.115:56011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346572, "uuid": "271287d7-54e2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.99.165:58752/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779346636, "uuid": "4d374e5d-54e2-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.1:38386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347125, "uuid": "7131bf95-54e3-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.225.16:50229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347182, "uuid": "9301a98a-54e3-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.141.17:34606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347466, "uuid": "3c51d9c0-54e4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://boblegvlist.christmas/2f58e8cb-6b6d-439c-97ec-6892fd7e9f07/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779347481, "uuid": "45581bdd-54e4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.154.210:40757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779348259, "uuid": "1502097b-54e6-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.1:38386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349028, "uuid": "df077276-54e7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.113.251:53665/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779349326, "uuid": "90d0d51c-54e8-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/8PSWBzht/stego-payload.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779350117, "uuid": "682cdd80-54ea-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.141.17:34606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779350174, "uuid": "8a62c173-54ea-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://fikvjna5.telemetry-orbit.digital/?ublib=b9f98708-123a-4f94-83a7-40d13a79bec6", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779350195, "uuid": "96e8c3d6-54ea-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.9.251:51314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779350227, "uuid": "aa1121af-54ea-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://tuplediskdkey.christmas/75a0c85c-cd34-4a9f-b671-b0a65c1638c5/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779350649, "uuid": "a57ee0b2-54eb-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.208.109:39846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779350840, "uuid": "1718dc58-54ec-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.56.46:54913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779350903, "uuid": "3c8be9e4-54ec-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.56.46:54913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779351313, "uuid": "3132f828-54ed-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.86.142:60669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779351975, "uuid": "bbe3a163-54ee-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.247.116:53712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779352038, "uuid": "e1810a55-54ee-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.208.109:39846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779352211, "uuid": "48926500-54ef-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.20:46474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779352267, "uuid": "6a163e02-54ef-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.196.219:52319/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779352565, "uuid": "1b785516-54f0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.196.219:52319/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779352699, "uuid": "6b92e4a0-54f0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.156.212:44283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779352936, "uuid": "f8e10434-54f0-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.86.142:60669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779353826, "uuid": "0b2c5d32-54f3-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.196:39423/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779353828, "uuid": "0c521c39-54f3-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.177.41:41970/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779354128, "uuid": "bed43fe1-54f3-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.255.86:40147/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779354258, "uuid": "0c708e6d-54f4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.200:52278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779354427, "uuid": "717663d3-54f4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://6jcrkuht.container-beacon.digital/?ublib=78e9b019-e631-4301-a930-5256899e3c25", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779354564, "uuid": "c2e5e599-54f4-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.239.51:53141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779354910, "uuid": "915e40cc-54f5-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.239.51:53141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779355627, "uuid": "3cab0b5f-54f7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.177.41:41970/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779355636, "uuid": "41efe9e6-54f7-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.100.181:35878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779356226, "uuid": "a19b6540-54f8-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.101.38:33181/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779356237, "uuid": "a84d1364-54f8-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.122.239:41563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779356351, "uuid": "ec0cafef-54f8-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.122.64:48551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779356594, "uuid": "7d005bc0-54f9-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.128.119:34661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779356777, "uuid": "ea013b89-54f9-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.95.81:47813/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779356891, "uuid": "2dea401c-54fa-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.100.181:35878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779356898, "uuid": "31f959b5-54fa-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.200:52278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779357382, "uuid": "527a1ad0-54fb-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.100.27:32846/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779357666, "uuid": "fc24ddb0-54fb-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://graphnewclass.christmas/b2160fdd-7269-4c68-8d6c-d5efad920c71/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779358092, "uuid": "f98a3871-54fc-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.12.179:42925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779358212, "uuid": "418340b2-54fd-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.128.119:34661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779358571, "uuid": "1777a276-54fe-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.37.225:33193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779358753, "uuid": "83f162cf-54fe-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.247.116:53712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779359170, "uuid": "7c49e09f-54ff-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.140.23:56181/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779359227, "uuid": "9e4aaf94-54ff-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.87.147:60914/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779359227, "uuid": "9e5367ea-54ff-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.87.147:60914/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779359419, "uuid": "10d5b63d-5500-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.37.225:33193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779359481, "uuid": "3590ed68-5500-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.12.179:42925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779359768, "uuid": "e0bf012b-5500-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.9.114:48712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779359778, "uuid": "e68dc5f1-5500-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.47.201:54141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779359837, "uuid": "09fbd5d7-5501-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.47.201:54141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779359889, "uuid": "28bc4d10-5501-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.36.18:49229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779359955, "uuid": "507061d8-5501-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.88.132:54441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779361027, "uuid": "cefddb9f-5503-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.182.166:53016/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779361037, "uuid": "d517edb3-5503-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.236.125:34217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779361152, "uuid": "1994a009-5504-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:37918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779361271, "uuid": "607d0f52-5504-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.159.209:41255/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779361275, "uuid": "630b8caf-5504-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.9.114:48712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779361424, "uuid": "bbd0c53c-5504-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.165.253.248:51999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779361533, "uuid": "fcaac5a3-5504-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.89.85:45355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779361751, "uuid": "7ee917e1-5505-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://22goulm8.runtime-nexus.digital/?ublib=45f1c6fa-fbf7-4e22-8cee-f9058ff59366", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779361866, "uuid": "c3166132-5505-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.182.166:53016/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779362228, "uuid": "9ad5d3b9-5506-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://busbytesadd.christmas/6464871c-26f3-41a3-8974-ebe3c9c23ad6/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779362599, "uuid": "77eb8439-5507-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.236.125:34217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779363070, "uuid": "910d5bf4-5508-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.74.20:56404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779363139, "uuid": "ba107d6b-5508-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.165.253.248:51999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779363371, "uuid": "44226b27-5509-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://icevault-cutshift.christmas/4a77d309-c9b8-4e76-8fb2-995b0939910f/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779363425, "uuid": "64b21db7-5509-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:59338/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779363490, "uuid": "8b164a56-5509-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.36.18:49229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364565, "uuid": "0beb8fd6-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_1a8274dfe0c54517.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364565, "uuid": "0c0c6f94-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_60f25696fe0ad71f.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364625, "uuid": "30087f31-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://variovac.com.de/NFPS/Aj.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364625, "uuid": "30088b73-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://franklinfuelings.com/UCC/Aj.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364625, "uuid": "300dd6a2-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://fele.com.de/nfps/aj.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364626, "uuid": "301ac62a-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://franklinfuelings.com/UCC/Aj.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364626, "uuid": "302c106a-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://variovac.com.de/NFPS/Aj.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364626, "uuid": "30445ee7-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://cantieridelmediterraneo.it.com/ucc/aj.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364626, "uuid": "3089f245-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.124.94.238:8888/install.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364626, "uuid": "309e692f-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.124.94.238:8888/AC.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364628, "uuid": "31db5c78-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://metecgroup.cam/js/Lorgnon.pcz", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364637, "uuid": "36b26247-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.74.20:56404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364685, "uuid": "53cdd0da-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.124.94.238:8888/install.ps1?key=hpK9mqasd324asdf23Oasdfw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364810, "uuid": "9ddb3184-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://pigtweet-kitdiff-it.christmas/1826589a-96d7-41c7-bf01-e6af60b1b115/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779364926, "uuid": "e32f73e2-550c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:59338/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779365595, "uuid": "72414438-550e-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.113.251:53665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779365646, "uuid": "90a15d97-550e-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://pigtweet-kitdiff-it.christmas/98b81e3d-566d-494f-a07a-8bd645d9f2f0/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779367157, "uuid": "14f67562-5512-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.57.240:50401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779367217, "uuid": "389b7399-5512-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.236.129:47455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779367273, "uuid": "5a0f2e09-5512-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://forcrash-classnet.christmas/37fb1fdf-f5cf-4c53-b784-230a9d811734/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779367450, "uuid": "c38b6d74-5512-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.idanburuku.sbs/Bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "ScreenConncet", "colour": "#94146d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779367815, "uuid": "9d215619-5513-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.92.179:46720/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779367944, "uuid": "ea068548-5513-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.189.158:43247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368285, "uuid": "b59405a1-5514-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://bjzrz6je.packet-cascade.digital/?ublib=addc135f-672d-447a-a7ea-dfae8cdd0d0f", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368301, "uuid": "bef8322a-5514-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.236.129:47455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368767, "uuid": "d471a676-5515-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.37.176:47211/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779368783, "uuid": "de584c9b-5515-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.62.184.102:42183/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369032, "uuid": "726073a3-5516-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.71.75:60565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369368, "uuid": "3b1d19f2-5517-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://labshift-winmail-get.christmas/81bff505-b183-4bd9-9913-31031f0fa4de/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369501, "uuid": "8a0f0cf1-5517-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.189.158:43247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369624, "uuid": "d34801b0-5517-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.99.183:39651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369624, "uuid": "d3940156-5517-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.99.183:39651/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369677, "uuid": "f300879c-5517-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.191.86:45069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779369695, "uuid": "fd77af47-5517-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.98.213:37715/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779370398, "uuid": "a0f9102a-5519-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.133.102.211:42608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779370568, "uuid": "05ee4f50-551a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.62.184.102:42183/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779370639, "uuid": "30299eeb-551a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.6.90:49026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779370809, "uuid": "95a62fd6-551a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.71.75:60565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779370926, "uuid": "dbb8631a-551a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.85.46:59158/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779371059, "uuid": "2aaf0115-551b-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.191.86:45069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779371528, "uuid": "428b6d22-551c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://frost-marketplace.christmas/71e79d24-b3c3-4cf5-ae3c-b2dd7835ef59/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779371902, "uuid": "21674fbc-551d-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.166.215.43:54628/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372493, "uuid": "81ab543f-551e-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://104.236.191.89/mirai.mips", "Tag": [ { "name": "104-236-191-89", "colour": "#75ed79", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372610, "uuid": "c6f3457b-551e-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://104.236.198.16/bin/support.client.exe", "Tag": [ { "name": "104-236-198-16", "colour": "#422c2a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372612, "uuid": "c840c4c3-551e-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://104.236.198.16/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "104-236-198-16", "colour": "#422c2a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372727, "uuid": "0cabef6e-551f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.85.46:59158/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779372727, "uuid": "0caf5296-551f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.209.200:57708/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779373160, "uuid": "0ef5f8c9-5520-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.159:40441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779373399, "uuid": "9da07548-5520-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.137.84:60521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779373567, "uuid": "01611d84-5521-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.42.158:53385/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779373637, "uuid": "2b1ccfca-5521-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.133.102.211:42608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779373688, "uuid": "49d20aab-5521-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-workshop.christmas/6ed705d0-6198-4273-9177-6590c4457894/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779373760, "uuid": "74c72222-5521-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.166.215.43:54628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779373867, "uuid": "b432a80b-5521-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.209.200:57708/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779373928, "uuid": "d88d3f8f-5521-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.42.158:53385/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779374468, "uuid": "1a6f9365-5523-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.156.21:58557/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779374476, "uuid": "1f9de3a0-5523-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.88.205:47190/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779374478, "uuid": "20cc7f2e-5523-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.167:37858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779374767, "uuid": "ccf0bb65-5523-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.26.107:59847/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779374952, "uuid": "3b27a853-5524-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.137.84:60521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375006, "uuid": "5b5f34f5-5524-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://nhr83i9y.kernel-vertex.digital/?ublib=bdd0d6a0-0a3d-4ab2-b93d-f0397977e338", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375066, "uuid": "7edb4b62-5524-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.84.140:51108/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375202, "uuid": "d0582bbf-5524-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.88.205:47190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375271, "uuid": "f99201d6-5524-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.243.128.123:44899/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375305, "uuid": "0dc15ec7-5525-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_7b8550224a5622b6.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375367, "uuid": "32532a64-5525-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.44.25:49108/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375426, "uuid": "55b1cf93-5525-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.252.87.232:44084/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375848, "uuid": "5146e797-5526-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://gift-harbor.christmas/9ec27899-ba4e-4ba0-abf9-fa9e99593a25/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779375860, "uuid": "58a32216-5526-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.130.177:38753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376029, "uuid": "bce70cb0-5526-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1p6cT81hwfsLgFJlgPg8tN-8AFD8Q2cx4", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376029, "uuid": "bcea6e99-5526-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1_KhkLquQZH9ZzdVezAYFDBdLmK-JZCiN", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376029, "uuid": "bd17cc38-5526-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1cMFdfiPwO9FnMIcP375lLPjGfQqlL8Vh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376092, "uuid": "e2833657-5526-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/YC5yGSkG/ste-payload.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779376530, "uuid": "e78638bf-5527-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.159:40441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377055, "uuid": "20e39e40-5529-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://104.248.119.34/m", "Tag": [ { "name": "104-248-119-34", "colour": "#2ba4a1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377183, "uuid": "6cfc7915-5529-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.64.231:44108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377299, "uuid": "b21f8d9c-5529-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.130.177:38753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377721, "uuid": "ad78a64d-552a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.72.164:41917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779377949, "uuid": "35ab9ec8-552b-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://tree-observatory.christmas/aa5f89df-2b20-4b2e-aa64-e2b460c6fe6d/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779378448, "uuid": "5ed20933-552c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.64.231:44108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779379765, "uuid": "7036f1b5-552f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.51.196:36539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779380046, "uuid": "17b775f0-5530-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://ice-evergreen.christmas/6d7f4205-3be6-4111-b787-b7f7655dde07/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779380526, "uuid": "35c699ff-5531-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.234.246:46124/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779380895, "uuid": "117dae97-5532-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.249.222:42813/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779381546, "uuid": "954cd06f-5533-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://x3o11wkp.signal-bridge.digital/?ublib=7b33fc05-4a1a-4cc8-beed-bfdc487eae85", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779381559, "uuid": "9d62854f-5533-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.156.21:58557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779381858, "uuid": "4fbb7a57-5534-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.124.150:33677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779381967, "uuid": "905915ff-5534-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.234.246:46124/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779382147, "uuid": "fb78d7b4-5534-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://runtime-control.christmas/0cd3d71a-1bb7-4e3e-b6e9-2fde3b3b1d79/zone.id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779382567, "uuid": "f5f9bfe1-5535-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.101.117:50928/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779382567, "uuid": "f646068a-5535-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.242.212:53146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779382699, "uuid": "448fe5c7-5536-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.124.150:33677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779382926, "uuid": "cc051d23-5536-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.101.117:50928/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779383233, "uuid": "833a5cbb-5537-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.225.163.226:42334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779383346, "uuid": "c65c9d11-5537-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://runtime-control.christmas/e2aead27-190e-4dd5-91a5-a29e3b34c767/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779383831, "uuid": "e7831043-5538-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.242.212:53146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779383897, "uuid": "0f04ae32-5539-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.203:46163/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384309, "uuid": "04874551-553a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.20.102.161:8080/cloud/712419111124.ocx", "Tag": [ { "name": "ocx", "colour": "#4de83f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384310, "uuid": "052a6cc0-553a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.20.102.161:8080/cloud/mscom.ocx", "Tag": [ { "name": "ocx", "colour": "#4de83f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384311, "uuid": "059cd871-553a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.20.102.161:8080/cloud/mscomctl.ocx", "Tag": [ { "name": "ocx", "colour": "#4de83f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384312, "uuid": "06101764-553a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.203:46163/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779384678, "uuid": "e073d204-553a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.79.137:44066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779385147, "uuid": "f7ba13c8-553b-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://signal-core-engine.christmas/b176b5c0-e343-43ed-a792-08c71e38f649/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779385269, "uuid": "40c389f8-553c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.79.137:44066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779385339, "uuid": "6a83aef6-553c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.232.20:44058/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779385876, "uuid": "aa42c242-553d-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.7.244:53476/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779386711, "uuid": "9bf9ccd4-553f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://stack-flow.christmas/58350bdd-1b1c-4830-9c1c-fe1ddfe98e9a/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779386766, "uuid": "bd12842a-553f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://0frduisp.cloud-meridian.digital/?ublib=92fa774c-a9f6-4cd1-ab4e-b18058e58bb4", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779386828, "uuid": "e197fb10-553f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/solid-23/bv/refs/heads/main/SijgpcA.txt", "Tag": [ { "name": "e73f7ff7572070d56a631ac6796adabd", "colour": "#472b51", "exportable": true, "hide_tag": false }, { "name": "limidos.com", "colour": "#b2b00e", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779386828, "uuid": "e1c1519c-553f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://toptionlab.co.za/tr.vbs", "Tag": [ { "name": "e73f7ff7572070d56a631ac6796adabd", "colour": "#472b51", "exportable": true, "hide_tag": false }, { "name": "limidos.com", "colour": "#b2b00e", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779386828, "uuid": "e1cd6bc7-553f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.sensio.no/BirdsKnocked", "Tag": [ { "name": "e73f7ff7572070d56a631ac6796adabd", "colour": "#472b51", "exportable": true, "hide_tag": false }, { "name": "limidos.com", "colour": "#b2b00e", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779386831, "uuid": "e3a27353-553f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/ghkjkghlkgl/ghf/downloads/2.jpg", "Tag": [ { "name": "e73f7ff7572070d56a631ac6796adabd", "colour": "#472b51", "exportable": true, "hide_tag": false }, { "name": "limidos.com", "colour": "#b2b00e", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779387499, "uuid": "7208f928-5541-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.7.244:53476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779387911, "uuid": "6786a02a-5542-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://telemetry-grid.christmas/1372c504-375d-467b-9978-c2d199db2a80/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779389001, "uuid": "f1042ecf-5544-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.54.142:54802/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779389359, "uuid": "c620deed-5545-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.185.161:40568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779389467, "uuid": "06ca2c02-5546-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://microservice-hub.christmas/b8f82153-4c34-4b9d-a842-791cf45d3bdc/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779389722, "uuid": "9ecd6ca3-5546-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.67.33.209:37422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779389826, "uuid": "dd082e6e-5546-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.84.140:51108/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779390089, "uuid": "7960b0c5-5547-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.7.86:43356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779390372, "uuid": "21fca28f-5548-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.1.235:38536/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779390726, "uuid": "f57558e7-5548-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.1.235:38536/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779390971, "uuid": "8779e020-5549-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-sync-engine.christmas/1fb89b25-45fa-4267-bf89-9dba7489b2a8/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779390984, "uuid": "8edb44ac-5549-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.67.33.209:37422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779391380, "uuid": "7b3b8ef1-554a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.54.142:54802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779391583, "uuid": "f3c5898e-554a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.164.205:41652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779391759, "uuid": "5ca618b6-554b-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.202.5:48197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779392357, "uuid": "c16eb0c2-554c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.46.71:48688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779392411, "uuid": "e19d06ef-554c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.46.71:48688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779392467, "uuid": "02fb9734-554d-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://proxy-hub.christmas/652f1bc5-e123-452e-9b8f-4dabded787a9/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779393025, "uuid": "4f5e7646-554e-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.245.198:40545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779393067, "uuid": "687ef0f3-554e-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.44.25:49108/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779393081, "uuid": "709fdfe3-554e-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.12.221:52500/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779393551, "uuid": "893e675b-554f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.202.5:48197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779393984, "uuid": "8afd078c-5550-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.150.200:60621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779394092, "uuid": "cb87728d-5550-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://signal-processing-core.christmas/de1ede75-0cc2-4104-9d8d-e289c3645697/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779394093, "uuid": "cbf52df0-5550-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.122.64:48551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779394210, "uuid": "11d6543d-5551-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.75.58:52257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779394523, "uuid": "cc49c68c-5551-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.185.161:40568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779394687, "uuid": "2def7525-5552-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.227.155.54/hiddenbin/Space.arc", "Tag": [ { "name": "165-227-155-54", "colour": "#344d88", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779394687, "uuid": "2df2bc62-5552-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.227.155.54/hiddenbin/Space.arm7", "Tag": [ { "name": "165-227-155-54", "colour": "#344d88", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779394687, "uuid": "2df2c552-5552-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.227.155.54/1.sh", "Tag": [ { "name": "165-227-155-54", "colour": "#344d88", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779394687, "uuid": "2df5c233-5552-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.190.221/hiddenbin/Space.arc", "Tag": [ { "name": "134-199-190-221", "colour": "#e18581", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779394687, "uuid": "2df7493e-5552-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.190.221/1.sh", "Tag": [ { "name": "134-199-190-221", "colour": "#e18581", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779394687, "uuid": "2df74abe-5552-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.190.221/hiddenbin/Space.arm7", "Tag": [ { "name": "134-199-190-221", "colour": "#e18581", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779395359, "uuid": "be6e1785-5553-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.36.162:33705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779395588, "uuid": "47288cc8-5554-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://byte-vault.christmas/6fcd3983-7edf-4419-a07c-6f5ba1cc67ef/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779395960, "uuid": "25333213-5555-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.119.214:40611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779397031, "uuid": "a2fb4c8e-5557-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.42.144:58734/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779397036, "uuid": "a676084a-5557-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.164.205:41652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779397147, "uuid": "e8737b37-5557-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://network-flow-system.christmas/d2e6c986-8be9-43ca-a1a9-3180380aad4a/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779397281, "uuid": "38530b99-5558-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.204.145:52389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779397628, "uuid": "0748905c-5559-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.150:47817/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779397749, "uuid": "4f5154da-5559-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.35.173:42283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779398228, "uuid": "6cc62b3c-555a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.150:47817/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779398848, "uuid": "de87fa28-555b-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.119.214:40611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779398848, "uuid": "de93e31a-555b-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.204.145:52389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779398849, "uuid": "df01d3c0-555b-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.31.78:43759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779399010, "uuid": "3e9d137f-555c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://stackbridge.christmas/e5a01d55-d272-4e70-97f5-32f8da384549/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779399013, "uuid": "407e382e-555c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.229.8:60369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779399140, "uuid": "8c1255af-555c-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.35.173:42283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779399668, "uuid": "c71b9f9a-555d-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.117.9:32778/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "30593b90-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/wyszztw.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "305aac56-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/iwhcwck.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "305e4c76-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/ljwqgms.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "305e5ec1-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/uagkrww.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "305f6893-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/iovmytx.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "30674daa-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/einqgiy.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "30674ec0-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/znebtbj.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "30784bf2-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/nbhpcpg.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "30795479-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/lduhsjo.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "307de52b-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/tpprwsu.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "30851611-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/atbtjft.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "3086387a-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/iztsowy.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400274, "uuid": "308cec2b-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/edykljw.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400275, "uuid": "30ab47cb-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.33.251:33922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400284, "uuid": "35f26e3f-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.31.78:43759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400334, "uuid": "5442d847-555f-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.188/2s3dkw7s/android.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779400748, "uuid": "4a94bb1c-5560-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://telemetry-control-hub.christmas/5a5ef6ea-aff7-420f-97dc-f9d824824654/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779401181, "uuid": "4ccd5914-5561-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.229.8:60369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779401358, "uuid": "b6304ca7-5561-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.226.177:55678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779401661, "uuid": "6b3fd2e7-5562-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.28.168:34795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779401836, "uuid": "d317c4b4-5562-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:37569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779402320, "uuid": "f3dadc5d-5563-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.33.251:33922/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779402609, "uuid": "a030e123-5564-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://container-mesh.christmas/5dff1e15-07cf-41aa-853e-094be4ca2aec/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779403868, "uuid": "8e2adc26-5567-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.1.83:55217/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779403879, "uuid": "94cc6fc5-5567-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.85:36342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779403995, "uuid": "da1f21dd-5567-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.28.29:44096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779404055, "uuid": "fe32094f-5567-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:37569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779404227, "uuid": "6453c2de-5568-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.1.83:55217/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779404238, "uuid": "6b2d7b78-5568-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.228.139:52437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779404363, "uuid": "b5a00ace-5568-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.118.239:45402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779404467, "uuid": "f3aa6a97-5568-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "https://packet-distribution-core.christmas/a8a06604-6284-4b24-8a3b-ac76f3884920/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779404662, "uuid": "6785b76e-5569-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.194.80:49682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779404827, "uuid": "ca418340-5569-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.241.60:55817/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779404828, "uuid": "cae2c6fb-5569-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.157.169.117:37027/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779405067, "uuid": "58d4be87-556a-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.241.60:55817/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779405623, "uuid": "a4aa3d4f-556b-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.162.238:51953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779405679, "uuid": "c5ead797-556b-11f1-8974-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.28.29:44096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779406266, "uuid": "23929765-556d-11f1-8116-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.12.221:52500/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779406268, "uuid": "24e82880-556d-11f1-8116-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudruntime.christmas/fff73df9-1428-43a3-acc9-8d0597dba1fe/g.ch", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779406576, "uuid": "dcd384e0-556d-11f1-8116-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.85:36342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779406625, "uuid": "f9d929fb-556d-11f1-8116-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.42.100.131//arm5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779406625, "uuid": "f9fe5f75-556d-11f1-8116-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/mips", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779406625, "uuid": "f9fe62ba-556d-11f1-8116-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/mpsl", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779406626, "uuid": "fa25d658-556d-11f1-8116-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.84.57.217:48089/Mozi.a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779406626, "uuid": "fa3f6196-556d-11f1-8116-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/toot", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1779407767, "uuid": "a27b0605-5570-11f1-8116-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.170.113:39790/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779386765, "uuid": "bc1dcd53-553f-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "0frduisp.cloud-meridian.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368765, "uuid": "d33ebe5a-5515-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.62.184.102", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779406625, "uuid": "f9b1b1fc-556d-11f1-8116-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.84.57.217", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372485, "uuid": "7c8dbaa0-551e-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.236.191.89", "Tag": [ { "name": "104-236-191-89", "colour": "#75ed79", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372606, "uuid": "c4a10291-551e-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.236.198.16", "Tag": [ { "name": "104-236-198-16", "colour": "#422c2a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377045, "uuid": "1ac8143f-5529-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.248.119.34", "Tag": [ { "name": "104-248-119-34", "colour": "#2ba4a1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779371884, "uuid": "16a2d0d6-551d-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.166.215.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779399665, "uuid": "c55ce562-555d-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.117.9", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779352265, "uuid": "6891a083-54ef-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.196.219", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369666, "uuid": "ec426741-5517-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.98.213", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779355624, "uuid": "3ac5253d-54f7-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.100.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340684, "uuid": "71eb548c-54d4-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.151.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779397746, "uuid": "4d324786-5559-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.35.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779390064, "uuid": "6a70a233-5547-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.7.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779397028, "uuid": "a154a2c1-5557-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.42.144", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779350645, "uuid": "a2e91d8d-54eb-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.208.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779322384, "uuid": "d6782ba0-54a9-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.56.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779361267, "uuid": "5e0e4e40-5504-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.159.209", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779333664, "uuid": "19bb8c74-54c4-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.130.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369666, "uuid": "ec42556f-5517-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.191.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779354125, "uuid": "bd025e17-54f3-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.255.86", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779382563, "uuid": "f3b32961-5535-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.242.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779367805, "uuid": "9767e0d6-5513-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.92.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779395945, "uuid": "1bf9b52f-5555-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.119.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779325265, "uuid": "8b27f13f-54b0-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.15.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779351965, "uuid": "b58f7441-54ee-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.247.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779374765, "uuid": "cb9c74d7-5523-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.26.107", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779346564, "uuid": "22cb8f4e-54e2-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.99.165", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779359165, "uuid": "7930eeb1-54ff-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.140.23", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779351306, "uuid": "2ce6aaf7-54ed-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.118.86.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779356584, "uuid": "76c29dad-54f9-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.128.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377705, "uuid": "a459c6cc-552a-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.72.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340865, "uuid": "ddbcc16d-54d4-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.225.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779370624, "uuid": "27bfef79-551a-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.6.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779336364, "uuid": "631ad9f1-54ca-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.166.119", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779381844, "uuid": "471d4fba-5534-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.124.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779367144, "uuid": "0d44bd53-5512-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.57.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779335285, "uuid": "dfc8ac6c-54c7-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.91.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779404825, "uuid": "c8c30494-5569-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.157.169.117", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779404344, "uuid": "aa34dd98-5568-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.118.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779391566, "uuid": "e99724a9-554a-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.164.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779389344, "uuid": "bd9e9103-5545-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.185.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779332464, "uuid": "4e64874e-54c1-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.185.74", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779399007, "uuid": "3cd7d2fa-555c-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.229.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779394206, "uuid": "0f52349f-5551-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.75.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779395344, "uuid": "b5f17c56-5553-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.36.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779404646, "uuid": "5e374f24-5569-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.194.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779397625, "uuid": "05508c1b-5559-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.64.150", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779359764, "uuid": "de95548a-5500-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.9.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779393964, "uuid": "7f5fed69-5550-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.150.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779349025, "uuid": "dd2fbf39-54e7-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.113.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779350824, "uuid": "0df6193a-54ec-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.56.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779394685, "uuid": "2cb505cb-5552-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.199.190.221", "Tag": [ { "name": "134-199-190-221", "colour": "#e18581", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779394685, "uuid": "2cb53ba9-5552-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "165.227.155.54", "Tag": [ { "name": "165-227-155-54", "colour": "#344d88", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779400265, "uuid": "2ace9b92-555f-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.188", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779334565, "uuid": "325f6b99-54c6-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.80.46.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779380523, "uuid": "34096eae-5531-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.234.246", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779328206, "uuid": "641886c1-54b7-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.32.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779359944, "uuid": "49b2525c-5501-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.88.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779358084, "uuid": "f5511bfa-54fc-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.12.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779397266, "uuid": "2f1abc08-5558-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.204.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779401645, "uuid": "6182142e-5562-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.28.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779373564, "uuid": "ffdc307b-5520-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.42.158", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375365, "uuid": "310a2795-5525-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.44.25", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343027, "uuid": "e61dc681-54d9-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.254.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340806, "uuid": "ba4956f0-54d4-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.55.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779390369, "uuid": "20903f30-5548-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.1.235", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779388985, "uuid": "e7611a60-5544-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.54.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779333425, "uuid": "8b0fb708-54c3-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.230.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779352684, "uuid": "625f8578-54f0-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.156.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779357365, "uuid": "48832ee1-54fb-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.100.27", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779361521, "uuid": "f5d1ed6c-5504-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.89.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779325145, "uuid": "4411e147-54b0-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.98.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779382563, "uuid": "f3b2ebdc-5535-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.101.117", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779354245, "uuid": "04c6fdde-54f4-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.108.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779327365, "uuid": "6ee93341-54b5-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.128.160", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779398845, "uuid": "dc9d71f7-555b-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.31.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779359885, "uuid": "26633ab3-5501-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.36.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347164, "uuid": "887cf97d-54e3-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.188.141.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343564, "uuid": "26b59207-54db-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.251.107.217", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340924, "uuid": "0107d54e-54d5-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "209.54.102.150", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779380884, "uuid": "0ac60fde-5532-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.249.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779393064, "uuid": "66f05502-554e-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.12.221", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779330724, "uuid": "411d1c51-54bd-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.21.95", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779325025, "uuid": "fc9c8f23-54af-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.215.232", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779401344, "uuid": "ae4c54f5-5561-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.226.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779405606, "uuid": "9a649dbf-556b-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.162.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779393006, "uuid": "444502ba-554e-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.245.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779361751, "uuid": "7e7fccfc-5505-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "22goulm8.runtime-nexus.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347105, "uuid": "64de0411-54e3-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.225.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779407764, "uuid": "a0d445ce-5570-11f1-8116-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.170.113", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779361024, "uuid": "cda6ffb2-5503-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.182.166", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375063, "uuid": "7d138466-5524-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.84.140", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384664, "uuid": "d815b3f2-553a-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.79.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779372724, "uuid": "0b442cf4-551f-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.209.200", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779403865, "uuid": "8cc62056-5567-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.1.83", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779373385, "uuid": "94edbe6a-5520-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.137.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779353824, "uuid": "0a0ae5d8-54f3-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.177.41", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779321605, "uuid": "061cacfa-54a8-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.42.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369006, "uuid": "62ebb640-5516-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.71.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779403985, "uuid": "d412f9a1-5567-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.28.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779359224, "uuid": "9c7559a0-54ff-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.87.147", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340024, "uuid": "e89b5b37-54d2-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.232.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779340985, "uuid": "250df7e2-54d5-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.227.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347464, "uuid": "3ada20bb-54e4-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.154.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779374465, "uuid": "18cc505c-5523-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.163.156.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779400265, "uuid": "2acf26f3-555f-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.33.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779363064, "uuid": "8d5acef4-5508-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.74.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779343564, "uuid": "26b6598e-54db-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.125.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779391745, "uuid": "54929ca0-554b-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.202.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779361024, "uuid": "cda6e091-5503-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.236.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779384306, "uuid": "02b7000c-553a-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "65.20.102.161", "Tag": [ { "name": "ocx", "colour": "#4de83f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779354427, "uuid": "712a2538-54f4-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "6jcrkuht.container-beacon.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779361385, "uuid": "a4b6b88b-5504-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.165.253.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339725, "uuid": "36413906-54d2-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.110.50.15", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779364624, "uuid": "2f7da860-550c-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.124.94.238", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339725, "uuid": "364173b4-54d2-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "96.126.176.23", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779331150, "uuid": "3ed915d4-54be-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "abyssalkraken.fit" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779367445, "uuid": "c059c773-5512-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.idanburuku.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779324544, "uuid": "dd9fa976-54ae-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "bakingstonetheory.fit" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779368285, "uuid": "b5252ffc-5514-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "bjzrz6je.packet-cascade.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779347464, "uuid": "3af38404-54e4-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "boblegvlist.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779362225, "uuid": "99853e8f-5506-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "busbytesadd.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779395585, "uuid": "45678e48-5554-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "byte-vault.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779364625, "uuid": "2fe89db7-550c-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "cantieridelmediterraneo.it.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779328806, "uuid": "c9f42479-54b8-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "chickencutlethacks.fit" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779390968, "uuid": "85b11241-5549-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-sync-engine.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779406265, "uuid": "23611f55-556d-11f1-8116-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloudruntime.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779402607, "uuid": "9e9cd10b-5564-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "container-mesh.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779326646, "uuid": "c2c1bfa7-54b3-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyber-prosthetic.fit" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779341406, "uuid": "2019e90f-54d6-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynga.pl" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779364625, "uuid": "2f9d4200-550c-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "fele.com.de" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779350169, "uuid": "877f0904-54ea-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "fikvjna5.telemetry-orbit.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779367270, "uuid": "5857d953-5512-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "forcrash-classnet.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779364625, "uuid": "2f895aae-550c-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "franklinfuelings.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779342009, "uuid": "87d4db38-54d7-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "freeomovie.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779371526, "uuid": "413fb245-551c-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "frost-marketplace.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339728, "uuid": "37d1066f-54d2-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "gaviao.ba.gov.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375846, "uuid": "4fe5dc13-5526-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "gift-harbor.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339726, "uuid": "36a7a03d-54d2-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "gotextileltd.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779357664, "uuid": "fae7ba48-54fb-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "graphnewclass.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779337564, "uuid": "2e096d78-54cd-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "hasmysql.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779345664, "uuid": "0a432072-54e0-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "hasvideoproxy.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779380044, "uuid": "166861f3-5530-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "ice-evergreen.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779363369, "uuid": "42e84c3d-5509-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "icevault-cutshift.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339725, "uuid": "36610b6a-54d2-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "klichkogov.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779369366, "uuid": "39d36589-5517-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "labshift-winmail-get.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779364627, "uuid": "30f3ea85-550c-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "metecgroup.cam" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779389465, "uuid": "055c88bf-5546-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "microservice-hub.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779397145, "uuid": "e70702de-5557-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "network-flow-system.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779375006, "uuid": "5b194fa1-5524-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "nhr83i9y.kernel-vertex.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779328506, "uuid": "175102fd-54b8-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "ntm4xnw3.renaissancefrescorestoration.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779335645, "uuid": "b63cc8fb-54c8-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "okb0lvez.subdermalbiometricchip.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779322625, "uuid": "65b9f7d1-54aa-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "orbital-velocity.fit" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779404465, "uuid": "f2204897-5568-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "packet-distribution-core.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779364807, "uuid": "9c1b002b-550c-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "pigtweet-kitdiff-it.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779392465, "uuid": "016df9d8-554d-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "proxy-hub.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779335464, "uuid": "4ac68701-54c8-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "regexcar.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779382144, "uuid": "fa17c9fd-5534-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "runtime-control.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779385144, "uuid": "f6180941-553b-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "signal-core-engine.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779394090, "uuid": "ca3af75a-5550-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "signal-processing-core.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779386708, "uuid": "9a43a3a0-553f-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "stack-flow.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779399007, "uuid": "3cfab55b-555c-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "stackbridge.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779373686, "uuid": "489a8407-5521-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-workshop.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779342906, "uuid": "9e3e5c11-54d9-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "td5323u3.primordialsoupevolution.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779400745, "uuid": "48e96abf-5560-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "telemetry-control-hub.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779387907, "uuid": "653a67a7-5542-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "telemetry-grid.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779334205, "uuid": "5c5390de-54c5-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "telemetry-orbit.buzz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779386826, "uuid": "e0d2ed2f-553f-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "toptionlab.co.za" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779377947, "uuid": "341256d0-552b-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "tree-observatory.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779350225, "uuid": "a8b8ce54-54ea-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "tuplediskdkey.christmas" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779339728, "uuid": "37eae1e6-54d2-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "vaci-cloud.b-cdn.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779364625, "uuid": "2f93c818-550c-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "variovac.com.de" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1779381545, "uuid": "95154a68-5533-11f1-8974-82aee05be84a", "comment": "Malware payload delivery host", "value": "x3o11wkp.signal-bridge.digital" } ] } }