{ "Event": { "published": true, "date": "2026-04-17", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-17", "timestamp": 1776471323, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "ffb846ff-451f-4f48-83de-417a6228b54a", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68046112-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1776384066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384066, "uuid": "4dc14307-5e1f-409a-a776-dbf510a5d5e1", "comment": "Malware payload", "value": "c4374912473cd42cfe4e1abab51af40e", "object_relation": "md5", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384066, "uuid": "18b44f47-c775-4b23-905b-ec7fa2ab42e7", "comment": "Malware payload", "value": "212c76daf355ede116eb04d4f9d08a112d07940a14dc248bc568ff1ba0a64e18", "object_relation": "sha256", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384066, "uuid": "be7f98db-2887-454b-9ab9-eb7336dbda7a", "value": "T13DD4F8B462047880C4AAA7729D74AFA8E23D11A9DFCE3ECC1194FAD01FB37557A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384066, "uuid": "d22a07c9-ec71-4662-a170-ca0cdf4eeb47", "value": "6144:ZJSveutXkgEoCqT2741a3LywBTwjMtxwHVMeOF0buUwKB:qeuhra7T42MMQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776384066, "uuid": "5d92aaaa-8d50-40ab-9042-86a58704845d", "value": 617316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384066, "uuid": "252e6335-d84a-4f21-881e-de8810c9354b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e746e6e-39f0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776384077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384077, "uuid": "0a980860-5a22-4280-9b59-711e5e0f1974", "comment": "Malware payload", "value": "650a29ce13b964102faa38d941447a4a", "object_relation": "md5", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384077, "uuid": "e705383e-1a85-47d3-8d2e-0793beaa939d", "comment": "Malware payload", "value": "89f1ae0eaf3d29a7c9c0fc2482a1c037674ccf98059796d0c8083256a58171b2", "object_relation": "sha256", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384077, "uuid": "1b9d70e2-fc2d-43c4-bae3-aae063160dd8", "value": "T131C51874B59878D0E66F8677E6F4EDB9263713F296CB688C0119A3C11EA3341FF098", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384077, "uuid": "e3af76ac-7e8c-49aa-a3e8-8e8e5fb1043d", "value": "24576:5bongH9dT+fIhdD2/DyS2W2adpxRioOg/STDhjoFiiYHKgCFJ4DSTaNTUc:z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776384077, "uuid": "bc134e0c-f771-4fc3-ae17-f843a4645d54", "value": 2651136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384077, "uuid": "3f733edb-8778-49dd-befa-cdfc8e85858c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ef5976b-39f1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776384426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384426, "uuid": "e131688b-fdbe-4d5d-a93f-292c47e34923", "comment": "Malware payload", "value": "410d23a5dbf4c3bdd8102bc38e391ffb", "object_relation": "md5", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384426, "uuid": "f2913121-f542-44f5-ab97-9bf64942beb6", "comment": "Malware payload", "value": "b878949cce428b2a967b2db5bf14b004cf871ee15f596f7611fd9175e18c38ca", "object_relation": "sha256", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384426, "uuid": "7311f6c4-ba75-488e-9048-7b3b68156d66", "value": "T1B1C52AB8B59838D0DA5F8537D6F8FDBE223316E196CF59880159A3C20FA2355FF098", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384426, "uuid": "e3202435-c4a9-4c1a-9a34-5864f14f17c3", "value": "24576:rS59Sr6SerurHMvdAbRQTceFf13HvoK/0r4aBjBrC+/gSCrAeBFxAt5:9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776384426, "uuid": "ea1b6205-8d22-4161-80d6-f936cd13ce5e", "value": 2652160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384426, "uuid": "d22ccc0a-cff9-4f73-be44-157fbdfe41a6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1776385155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385155, "uuid": "166da7f1-25f6-4ff4-9d85-7d7ef9f00f2c", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385155, "uuid": "ae9626a5-3118-4dba-a927-b6ec038848d7", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385155, "uuid": "c8b37fa1-90e4-4c32-9503-4395b65630ac", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385155, "uuid": "f719d63f-2a86-48f7-8858-f8e48c4856cb", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776385155, "uuid": "cb2074e6-aee8-4517-a1d9-508bf1856929", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1776385278, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385278, "uuid": "8fc09e43-be67-4a2d-bb53-7ef8485d7e2b", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385278, "uuid": "ff2df143-8751-4ce7-a652-540fa9229c40", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385278, "uuid": "61dd33ea-0bc0-421c-97a5-ebe2b8df1644", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385278, "uuid": "060574d1-c0c9-4c53-9a20-54d9319865f4", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776385278, "uuid": "bf18ceed-9ec5-4f65-a065-daebe77d9839", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776385340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385340, "uuid": "b88577c7-e103-4b6e-b4a4-06cd4761c77b", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385340, "uuid": "68f87730-8e45-4dfa-bc31-f289728d695b", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385340, "uuid": "2479151a-82a9-4ad1-8b42-7c1900053c99", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385340, "uuid": "dbc95af4-cf8c-4ea2-9ef4-b3d6929c4eee", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776385340, "uuid": "d23895f0-6ab9-46d6-a3d0-796cb2957ab5", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c013114b-39f3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776385448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385448, "uuid": "99e7a6e0-400e-47a0-975e-bb700fee7b94", "comment": "Malware payload", "value": "a2e00602ce605cd76a176e9eb626a6bb", "object_relation": "md5", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385448, "uuid": "97e05022-955c-4042-aaa4-5e8cf47da8b4", "comment": "Malware payload", "value": "6ad600b85669183f6e68c278e3bee3eb7abc6717dc6f7d2a59630ac3e5571c7a", "object_relation": "sha256", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385448, "uuid": "46ca67b3-6da0-459a-b892-036cda3c2c08", "value": "T143C52BB4B59878D0D96FC63BD6F8EDBD663317E2958F588C0119A3C21BA3751BF088", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385448, "uuid": "8de74c73-b215-4d32-9d0d-aca0c00b06a8", "value": "24576:r8Sfjf1DnvqwrFPlATLNNxXKqovCjglSWuBnrOlKr3hWiSIxr+0uBn4lvpuR:z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776385448, "uuid": "1876f3f9-6a08-4eea-8636-f98cfacc0246", "value": 2668544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385448, "uuid": "afffb1a0-69f0-465d-bb0c-50850ad33bbe", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "269df87e-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776391633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391633, "uuid": "f43a99c2-9c22-4655-9594-ce3729181f26", "comment": "Malware payload (Mirai)", "value": "63bc73c0adb3acf412c44169a4e91972", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391633, "uuid": "d68e9586-d590-4405-9af5-5465f74960c1", "comment": "Malware payload (Mirai)", "value": "3ffa61bb30699516e9aee0b1dc7052005441f4b9027adc5168e8dc7c42208614", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391633, "uuid": "dcebdcdd-9564-48a5-aade-cb85af6622c9", "value": "T154E32A46E7408A13C4D6177ABAAF42453323AB64D3DB73059928BFB43F8279E0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391633, "uuid": "d4ba42bd-522b-47e0-bc34-935e034aa1f8", "value": "3072:X5uRoJ48aV7/HBcP0x57mW7gz4habLNJmM/9wGS:X5uF8aV7/HBcPs5V7A4QbLNMM/9vS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776391633, "uuid": "d247b85f-5b12-486b-8566-d555aca2f1bb", "value": 154303, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391633, "uuid": "c48a89de-5abe-4a3a-8fd1-cb021d1a3093", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29b1bb3d-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776391638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391638, "uuid": "41fdc0af-ff1f-4ffd-b2a2-67c8b60e99cf", "comment": "Malware payload (Mirai)", "value": "f833343c574aa6c98c42f8e29ad1eb50", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391638, "uuid": "dfd6b63c-9c58-4938-b866-ca7ffa8d17f9", "comment": "Malware payload (Mirai)", "value": "517f652fcc5ebedc51ea608c66ad363556a0b520fd0adc028821c1b223a71996", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "5608b882-59fe-4912-b34f-dbf9506df090", "value": "T1F393B81E6E219FADF769873047B78A21A75833C627E1D685E25CD6002F6034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "a580e48f-edd6-46bc-92c3-c9b15ca725f1", "value": "1536:KloXJI3TfgvW5aIq3sULAHwXgmh68eblnF8kmu:KkJIDov0axlLHXgmkT8Tu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776391638, "uuid": "cfba1799-e52a-4291-b247-3454e0d869b1", "value": 93352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "2512cf3b-f945-4fa0-95f5-a81339b86883", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29b4a999-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776391638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391638, "uuid": "21a63dd2-c3e3-4201-b284-c023362ce137", "comment": "Malware payload (Mirai)", "value": "a7a12a991c49eca40e3415a976f7e92c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391638, "uuid": "2fa653be-05a3-452f-8ab4-e25b88531d7a", "comment": "Malware payload (Mirai)", "value": "71bc509c6964d96ed477ae45941e7ab48a7d8d7d9973da2eefe7d7a5be02204b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "ab7fbef7-9397-4128-945f-187643559076", "value": "T150F2F781B8825A2BC2E423BAAA6F518E336173ACD3CF7717D8115F117B8991F4D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "7c8fd351-8abd-4462-8fc6-208533d48109", "value": "768:hTbc4lzXL4ugq3GSKWKKCBo2T4DpjqG3+WHrQi6Mj6:FX5gmGe2T6plHrQiU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776391638, "uuid": "78286cca-4eda-4638-af25-452f74de17ac", "value": 37144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "65c3ef59-e824-4593-9f4b-baad21423a10", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29bcd020-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776391638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391638, "uuid": "090cc60b-e7e7-49be-a688-25bd57d0bf90", "comment": "Malware payload (Mirai)", "value": "907b4174f3a6f1044e575c41459376ac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391638, "uuid": "2b78f987-e887-4aa6-b8d3-fd2b2a2fa026", "comment": "Malware payload (Mirai)", "value": "dec2cc98a4c5c8b61a8ee7f3018ebef94c05adc36e54db5421e9bdcc4d82747e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "b4c315ed-f12b-49d4-8a28-8736114ed68c", "value": "T14E633A81BD815A13C6D112BBFB6E41CE772613A8E3EE72079D266F21378781B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "631507b1-1848-416b-b55a-7aaaa275b378", "value": "1536:T1dPhyFU0LMdnl+MQ12hM82O5HedO9N0lyZvfy:T1d8gG12uPk7K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776391638, "uuid": "b2dea28a-29ba-4dcb-8974-78a56e6c47b3", "value": 73372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "da3553d3-74bf-4831-b1db-231bd843b3aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29be001a-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776391638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391638, "uuid": "92f1ba53-1a6d-4e37-ae0e-15a25677ea08", "comment": "Malware payload (Mirai)", "value": "2bfc80b696680a8e4b80c8c2aa75fc86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391638, "uuid": "54603840-b10a-499e-bb61-573375cbb058", "comment": "Malware payload (Mirai)", "value": "e39d80a36646fe1f18a75528be52c7917185859f0c743c3cb3fb7009834770f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "922ddd56-48ad-41a2-9681-88fea622518b", "value": "T19B730995B8818B22C9D512BEFA1E118D3323177CE3DE73129D206F24778796B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "63a7bae5-1e24-4b0f-a727-32641aca89e0", "value": "1536:bAnYSDACyTQ8bM80RoaPEIhDQQMQiZ33oTXlC87sL5oYMH:uMCHYx0RoaPY3oTXlC8gLyR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776391638, "uuid": "45950412-1546-4995-9007-c8867b2e11e4", "value": 79324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391638, "uuid": "fe588f74-8694-4eca-a6cb-aa190cb1962f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29c0dd8e-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776391639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391639, "uuid": "e51c1069-45f3-467a-ac0a-e3376d97a358", "comment": "Malware payload (Mirai)", "value": "69fbdef465e6246de2936a032037fb5a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391639, "uuid": "df47ae6c-265f-4cc5-9cfe-e1d1b510fefa", "comment": "Malware payload (Mirai)", "value": "5ccbd18639d5884d552943b9bc34805ac5f05305acaafb3ebf29841f251df3e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391639, "uuid": "45cb76d1-43ea-46e7-a73e-abc5313fdee4", "value": "T17C735B22BA751D27C4D4A87A61F30721F2F2478A35AC8A1A7D710D8EBF35A5032477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391639, "uuid": "6aec7cff-10f4-4c5b-bfc6-4109c195095b", "value": "1536:O8fS5Zm4fVl99BvTwptjQ7jtheSNM50+WTQyE2tAEz:P6TnT3j/ZN80+oBz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776391639, "uuid": "91b758bf-802d-4cfb-931b-98e7344ca03f", "value": 76480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391639, "uuid": "32795855-90b5-4659-85c2-d71c22ed6be5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29c66120-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776391639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391639, "uuid": "464262ef-195f-432c-90e4-5e9f3f9b8732", "comment": "Malware payload (Mirai)", "value": "cad06820a476b038b4c7e04c2149d600", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391639, "uuid": "907e8722-4a09-48cf-83fa-64673fa92472", "comment": "Malware payload (Mirai)", "value": "8d9525f2f98722c711f9fc75499cf98e59f4652ab23d086b5b34769771f421ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391639, "uuid": "5438989b-0065-4204-b3a2-72037c45d62e", "value": "T16B539E77C8396E64D25581B0B8748E782B53F98482571FFE1A99C27A8047EECF6483", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391639, "uuid": "3707cdc6-1b06-4ee6-890e-5da826c019fa", "value": "1536:MaCwtuAPFqcgdEc0RKk3XgfuB+CS7fF15Zy:M58PMcgad4kiuB+FtHM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776391639, "uuid": "2c8bbbfb-b379-40b0-9198-4425605c1b99", "value": 62948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391639, "uuid": "e7265507-9855-47c1-92dc-855421de4d61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29cadfbb-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776391639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391639, "uuid": "400df709-6dff-49fa-bc86-18b7dd8b9705", "comment": "Malware payload (Mirai)", "value": "bbc9b7bd8ad328e3c9073ffb74a06c6a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391639, "uuid": "3116c494-e639-4b8b-93cb-ccd68e419f1b", "comment": "Malware payload (Mirai)", "value": "a7a869bfe672dc97e0fd9d37a5aa5057627349b837330b81cf395fc2c4976fef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391639, "uuid": "6908f076-4aa0-4f63-bc16-aba52653670b", "value": "T18F732ADBF800DDBDF80ED77B44530A0AB271A7910A930F366357B967BC321A45866F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391639, "uuid": "8e5f910c-0945-4ee1-9aee-19baff9880dc", "value": "1536:/dOKk0xI+8XQPsZWhVzEE8Vyf1FuhpUhaqPUz96Nn7GdKk2D0Vm8Nx:/dOKzxI+vschVzEnyf1FYhqMz9KW2D0J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776391639, "uuid": "2bc18bff-6678-4a99-ab9b-621a93aad958", "value": 80348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391639, "uuid": "1f448f35-9143-4aac-a528-5dad194be34c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b0aa52e-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776391641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391641, "uuid": "28d6901a-7989-48d1-a1af-17ed84f703ae", "comment": "Malware payload (Mirai)", "value": "17b61fe153c0455980c7250ef72738cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391641, "uuid": "97555c6e-e936-453b-8293-33c100f8bf0d", "comment": "Malware payload (Mirai)", "value": "6808ed62a01c196021c0ea09dd3b602b4994502a379887e00fe985ccb994d209", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391641, "uuid": "508e96eb-34ad-4660-972b-083f0d17d9ec", "value": "T17B93D606BB650FFBD86FCD3746A9071239CC550A22E93B3A3674C91CB51B64B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391641, "uuid": "59968b85-ed06-40ac-919a-c2326d230876", "value": "1536:DX1N7eUx/tBC/4YAlrCfw0E3QM5k4yZr5rH0Vc6VRs61xCbV:DlN7eUx/f9Z3QYyop51Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776391641, "uuid": "38b1c2e8-b2d2-4beb-ac5b-3e0183d53776", "value": 93496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391641, "uuid": "6b02fa40-ec49-4369-b59f-b7a6367a4ed5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b128180-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776391641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391641, "uuid": "e0e03234-19cf-4e00-a4c0-238b05a14700", "comment": "Malware payload (Mirai)", "value": "605b41f3df18243969918d4013878ded", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391641, "uuid": "1060e0ae-4cbd-4a4f-a75c-1989e98ecfbf", "comment": "Malware payload (Mirai)", "value": "a0f8d5bef02363ff8d1daefc800d5152b0e637641945e780abb39585ef0261c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391641, "uuid": "0ab090ca-a7f1-4dbf-9b34-9e697793a492", "value": "T163437CC4AA83E4F5FC9701751033A73B5A72F4361069DA87C769D83BBC52A11EA1B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391641, "uuid": "98565fba-9fc0-446c-8d42-4376ca6a464b", "value": "1536:ZyN5z8bAOpvnd02e98v2PORI7yguDTCJSz0RZ17+v2nzhNKSf:0N5wUOpvnReO2WR1Cgz0r1K+nf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776391641, "uuid": "e873d725-da8f-48fd-ae23-9351a2ee3274", "value": 59152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391641, "uuid": "83334998-5efc-45b8-9337-87ad7041109e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a089245e-3a12-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1776400078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776400078, "uuid": "a3b333e5-349e-4470-9d38-3595dbc01f37", "comment": "Malware payload (NetSupport)", "value": "f2e67b07a22248e8b91da525b71b4672", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776400078, "uuid": "92b08a01-3ac9-4ffb-8541-7488931b3e1b", "comment": "Malware payload (NetSupport)", "value": "a11e4aca1a2d9480a10ec40c3cafc650107816b032460234490612c8bea692ea", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400078, "uuid": "3811c4fa-bf41-45ec-bdcc-ad643e0daf66", "value": "T131F55C0BEDB94CE9C099A27484336216BF647C401B7273E72AD5B3642E737F0A875B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400078, "uuid": "452cd2c9-6606-40e9-967c-5a5007548015", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400078, "uuid": "83a419e1-dbd0-42ad-a35a-4be3bbe9f894", "value": "49152:v4xD/kul25iPcUCnRGxLPG9xA9W5UjE9clItE:v4vuSUfiU5Tu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776400078, "uuid": "b2bd6968-d844-4b62-89e1-3373b54ad221", "value": 3602864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400078, "uuid": "0198fe0e-6734-4014-8d87-9aec59aff0c3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dea110a9-3a16-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776400532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776400532, "uuid": "dace04ad-7599-466e-b99c-2dd7a1ee2daa", "comment": "Malware payload", "value": "4940374aacc739c790007881c710a88b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776400532, "uuid": "534a596c-d3a3-4501-98bb-8b69ad9b9556", "comment": "Malware payload", "value": "bb3060fe9eaab7201b38e69802d7228cd10ffc51847130747002b5cab6f70794", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400532, "uuid": "5f99e025-928c-4b7f-a1f6-51f47820ce01", "value": "T1F68309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400532, "uuid": "02d28401-c4ab-4dcf-9af2-51f64774a707", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn8WamVN/:XEKltp9txAX/yr2pb8WLVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776400532, "uuid": "e82b5ed1-7ddd-4dcf-9cd9-04e0edf41896", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400532, "uuid": "6a82769b-0c3d-433d-b9ee-1239d43fa194", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62cbf6a9-3a17-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776400754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776400754, "uuid": "d4a9bc21-f41e-4f39-85bb-640db9ffda96", "comment": "Malware payload", "value": "cc0c4b5e397d84c47cb9e87f636ea7b2", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776400754, "uuid": "746e00e0-4330-42a3-8c2f-beb062fb5f2d", "comment": "Malware payload", "value": "4c997f31a7967050362f49dbeab864ce8d2c5e17e94d72008a81d1bc316813c3", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400754, "uuid": "31c65b82-17a1-48cb-8382-3849d0d24ae1", "value": "T18F3191CF22E20EB0ECA0B93772A94844B9D5E1C750CA6F097DDD38E6468CE187401B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400754, "uuid": "f184b9ed-3700-474f-ac76-6b5a5e563c6c", "value": "12:Gn0FS8ki0FSQ0FS2c43Iu0FSsAeQgv0FSQ0FS5W0FSzCFv0FS0v0FSzKv0FSofRy:1t6wTc4EfAJgM8GU8Y95fyZanReDb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776400754, "uuid": "0076c0b4-3c17-4344-bb80-02eba6f539aa", "value": 1616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400754, "uuid": "fd4fde3f-6da9-4b11-8182-df6b5cce783c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21792f0a-3a19-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776401503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776401503, "uuid": "699290d2-8738-4a62-bd04-d416fe7be051", "comment": "Malware payload", "value": "881286b9e14993a6a2d89125b62a26a9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776401503, "uuid": "223379e7-0493-47b6-be3b-d5af48c559cc", "comment": "Malware payload", "value": "4fa25ed252e8cc7d3ccbbcae8c99b0448f0865e931b830a4db627ba004000a61", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776401503, "uuid": "ba8f5742-f056-42bf-88f9-5ca4fda9921d", "value": "T1E093E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776401503, "uuid": "4651568a-454f-4822-9270-28daade37dbd", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX2IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776401503, "uuid": "54b4149a-9d72-43eb-8559-f5ef0f369326", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776401503, "uuid": "d1887bd0-3118-4649-b91f-69d3403fb0fa", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33372d20-3a1a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776401962, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776401962, "uuid": "fde778e1-ce7c-4bfd-a996-0aab2d2710a0", "comment": "Malware payload", "value": "c1a9f043f460d588192a2a06c918f462", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776401962, "uuid": "ade70cc1-ccad-482a-9b2d-8f99d1ad3d66", "comment": "Malware payload", "value": "9a6056d9c91c82955929f3c71ebe6cd59603b6e05d2438a81510f97a5c93c62e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776401962, "uuid": "725f4a06-4239-4a2f-b261-3b8cc83185af", "value": "T12D931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776401962, "uuid": "ceb30057-17a9-456f-af66-4f9e9b1a3818", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJKeP0sCxK8G:n8iIL0GitkbFv2v05xLkr10sCxboIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776401962, "uuid": "2504f73b-e7ac-4e47-8786-b55e2675e276", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776401962, "uuid": "7bcdf883-412e-4c7c-a084-00865732598e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c9887a3-3a1a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776402032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776402032, "uuid": "8c4076d8-0b2c-4296-aa8a-3c9b658221dc", "comment": "Malware payload", "value": "b0ab57a2051deef44cefdde391d5f64c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776402032, "uuid": "0142a288-abd1-4afb-9ec4-a23433254db8", "comment": "Malware payload", "value": "0396fc4b71ba4257f149d26cd7ab67df1b4009b450585cc63c5bb68bba40623b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776402032, "uuid": "f8ab2913-4b9c-4b03-a636-c1f75f3d9068", "value": "T1C382D004BC2E6E21B6A6832FF1D2404F384466762B7E10FCE9D2272953671E5273CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776402032, "uuid": "5cbe29f8-43d4-49bf-8e2d-8795bb8cca3f", "value": "384:ek67Ydm/aaGYM/11IiOC/K9Frv4B5r5XfErxxyl+JjRjDyJIxieNJu2Ey:ek67M0fK3OCC9NvA78ylEjxumxieNJuO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776402032, "uuid": "d6a351f8-b6d3-4247-a980-972eda6195f2", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776402032, "uuid": "5285c7f6-dc39-4d81-b2ce-9c1d6c5b3416", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23f2dccb-3a1d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776403225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776403225, "uuid": "a56054d7-b932-49ed-b16c-83bf6ddd5d58", "comment": "Malware payload", "value": "377e2a3f2b6e3100257178fa82b6952f", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776403225, "uuid": "e3abd84e-ef3c-4a9e-82ee-71c72a2dbd2d", "comment": "Malware payload", "value": "3391e8fdc6466f5cb2eb00cb71ecc4606a727ed06655c02255c22c2dcf58cbc7", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776403225, "uuid": "c730e759-de2d-4915-b856-91d6c2eb4439", "value": "T1DB24BD96D098129C0F6334D5EE42A8BC5DC289DF71D6AEFB774456DB82E0C0E16CAE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776403225, "uuid": "db44a038-c405-4710-9d7b-ff7b85a44b07", "value": "3072:Fk5ra7tOx7HZ+TTMkTEdz2ndTJpdsXv3zXqsYeuh9G+iysav+:O52sTZ+H5wd+t0XvJYeu9lv+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776403225, "uuid": "b732c77a-6079-4138-ad6e-cb3281d7ee8e", "value": 223293, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776403225, "uuid": "384cf02a-b3e2-4627-804f-5d1189a88f83", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48fe225d-3a25-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776406723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406723, "uuid": "e0c9151d-a29b-45cc-a026-1b34df48d247", "comment": "Malware payload (Gafgyt)", "value": "e533b43164de8a87ca3f11a967f2da90", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406723, "uuid": "d88d8809-9793-4ee8-894a-44a9b727bb9a", "comment": "Malware payload (Gafgyt)", "value": "c4e9c7e8ddf9d950f60d5b59b6d3258959ea3346e4b1c3ea335950dbf3024dc2", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406723, "uuid": "234b0fcf-04a3-48c1-8634-7b7b2404a4a7", "value": "T1DBC33A2B3B231E23C0C9507102D31332BAB5D76538BD57E7B9D06DAC2F1AA983416B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406723, "uuid": "14a9d569-81a2-4e20-ad79-c613ca997bec", "value": "3072:9SRC0+2noxQHh0NPGHCphakTrnorm/nCEP/UnSQf/R:HlgCphakTrorm/nCEP/UnSQf/R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776406723, "uuid": "be71de42-5517-4189-9d3d-cc5a5f2662f2", "value": 127477, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406723, "uuid": "d5596d59-40d5-4066-b95e-aa5813a36fce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ea2e2d0-3a25-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776406813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406813, "uuid": "67428909-e186-4481-9fd5-4ed5f0c344bd", "comment": "Malware payload (Gafgyt)", "value": "88ca9bd5e55ca6c95cba88b39e7a812e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406813, "uuid": "eddde735-0663-461a-ae95-30686c9d890f", "comment": "Malware payload (Gafgyt)", "value": "c847d8cebe44eec7ae9c476391aa2a0d1fdf03a699e0b56552e8074cca3cf6fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406813, "uuid": "1c4f9dc8-004e-4008-b946-4f33b49f8651", "value": "T153B34A47671C0B43C58B5AF12DB737F187ADEA7106E22185E40EFF801B72A705622F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406813, "uuid": "cd590c98-5f04-4d9e-8c00-1ef97ef3d914", "value": "3072:w/ZpCk/EO0Z6i5JCmF5hyp+WvCtQna0PDG4gQNcR:eZpqO0Z6i5wmF5hyp+5tQna0PDG4gQN0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776406813, "uuid": "ca8c0dff-c15c-4792-a9ac-7ab35c576c93", "value": 116437, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406813, "uuid": "fe0794c6-cc67-4458-9415-cb97e997af5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd3ba14c-3a25-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776406918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406918, "uuid": "afa3e514-8c24-4402-b891-c782efb5aaa0", "comment": "Malware payload (Gafgyt)", "value": "337a7d521f917c932f21683d91a76978", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406918, "uuid": "9de2784d-60d4-4534-af11-016c89a2bf9b", "comment": "Malware payload (Gafgyt)", "value": "7f289f4031b5f7026895b5e5d6355a3debf2bff536a4d3ba1b64b971a01fd0b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406918, "uuid": "0b00c9b8-89cf-4bad-99a9-a85ae96a87a0", "value": "T1FAA35B86D643C6F3C4430AB1126F965A0632FB3A4E3B8EAAF71C7CF49B129D531157", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406918, "uuid": "80ca0bd4-55cd-4e3a-b43d-e5d786d5b760", "value": "3072:KR3TUPKBVjBW/EZbb29akWbjN1Uh5hETeRrXnF0OzTyoQQub:KdUPKBVjBW/EFb51Uh5hwehXnF0OzTyv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776406918, "uuid": "933b99e5-00ea-4084-8832-069dabdf8edb", "value": 99773, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406918, "uuid": "44c445f2-a03e-4204-a3ee-d98f1f236f79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "043d9f65-3a27-11f1-bc00-82aee05be84a", "comment": "Malware payload (ZigClipper)", "timestamp": 1776407467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776407467, "uuid": "6b2ff1c1-949d-46d9-a653-77dfc8114167", "comment": "Malware payload (ZigClipper)", "value": "379f8617e3a4bac75967865fd515e16d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ZigClipper", "colour": "#72f06d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776407467, "uuid": "78458629-01f7-48e7-afff-f3ae77f432b6", "comment": "Malware payload (ZigClipper)", "value": "8ea0a4e1ebaa2134dbf13284db36b0edf8ffb728c99d3f2ea00e481b64ae84a5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ZigClipper", "colour": "#72f06d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776407467, "uuid": "763e41a3-faa2-4fb6-891c-c25730bc7109", "value": "T1EBD432DF6ABCE0CCD4517AFDD584EC018B68799C7690008E1686EB17FC6AB438F1E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776407467, "uuid": "5512bafa-b97f-4deb-bdaf-107148e89ce1", "value": "12288:rSQecZh1oPTS2HRO4iY43yZKiA+9tQspiJ:0cZgLHw4ZBZ4+iJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776407467, "uuid": "575da149-8069-48f5-9e20-aec67741b022", "value": 654088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776407467, "uuid": "f5c1b6b3-f7f4-40ab-8b09-3843ebab6551", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "775cd226-3a27-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776407660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776407660, "uuid": "d2b1da21-9e52-42e7-bc6f-f9c6f6fe0668", "comment": "Malware payload (Gafgyt)", "value": "585e7430fe62c53cca5325cd4507e3c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776407660, "uuid": "064185c7-91db-4b80-81a4-0677e73491f6", "comment": "Malware payload (Gafgyt)", "value": "3263f4af3ca3da90bb43debc46e02109e955b41f9244eb26da28c5b635c6d99f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776407660, "uuid": "2d4d27b1-18ad-422e-9503-8f19e3e74575", "value": "T11EA339829640D5B3D09306B612ABCB150133FB3F4A6BDEA6F35D3DF88B509817225B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776407660, "uuid": "372430e6-9841-4d1b-b965-c0c6a4af5355", "value": "3072:LeFymRRUcUQ9UjjZaLPPpQlwj24/3CI5htTzZ0inF0OzTyoQQub:LqfX9UjjZaLP+FWCI5hdWinF0OzTyoQ7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776407660, "uuid": "16311bb2-2d41-4aae-832a-0dbe1eb6c452", "value": 99773, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776407660, "uuid": "2ced0d40-66a6-4a5d-8a77-fe56a5262376", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "419c2b4b-3a29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776408429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408429, "uuid": "3107b194-0bd9-4422-bc45-ecbe53698bed", "comment": "Malware payload (Gafgyt)", "value": "3facecb4cb44ba0e8b6b9aa00ed31ed3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408429, "uuid": "f3c72af3-9a56-40f9-adbd-761ec3c841e4", "comment": "Malware payload (Gafgyt)", "value": "3aa5d9b6715d22c5acf22182475df66becfd4b5943efd887b4be784189aafd03", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408429, "uuid": "2c580ed8-e03a-4577-a99d-1a4b59a3ee8b", "value": "T136B37D1B6292C6FAC08356B527DFA2618423F67A0B36721B73D4BDA43F15CC95D2D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408429, "uuid": "727c0714-b5c0-462f-b277-cf6f6ce30650", "value": "3072:Pl2n/WelPFo8NezN3/S2VvXfpha0fZPCZVOXinYuM8R:FIy4QN3KmphaQZPCZVOXinYuM8R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776408429, "uuid": "acfcd93e-86b9-4e8d-b4cd-66f761419fa8", "value": 112832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408429, "uuid": "1705d734-20cd-405d-93c5-9e99a4a18b87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "983df330-3a29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776408574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408574, "uuid": "13be9fbc-8b58-4c85-be4b-684097846692", "comment": "Malware payload (Gafgyt)", "value": "fbb4e59114b7f518860d44f1813d5bd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408574, "uuid": "69ec84bc-5eee-4570-9e6d-1c06432f7664", "comment": "Malware payload (Gafgyt)", "value": "bd0af9b9371a9930a414019edacd73fffe2cd985567c2b35db137fbd9bde4cf5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408574, "uuid": "9df80032-b150-49c5-8f4e-d19b1907ea95", "value": "T1C4E3B65A77618FB3D81ECE3306AA4602108CD55A02ED6F6FB2B4C56CE78B84F45E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408574, "uuid": "1c96d50c-e362-4168-8a2d-2a68b8a03015", "value": "3072:JqSf87PE046LUNn5hdCgPumzxRxulq+1uPNd5R:JqSf8w046YNn5hdCg2mzxRxulq+1uPNB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776408574, "uuid": "1b61a5d9-4484-4272-8390-bb5bae7d0774", "value": 154580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408574, "uuid": "36105615-0fcc-40e7-a727-0f99232d5a3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0b2ad8e-3a29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776408696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408696, "uuid": "69a37aae-75e2-44b0-83e8-878fded521bc", "comment": "Malware payload (Gafgyt)", "value": "572ff35bd498c7ec48edcd0220c84bb4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408696, "uuid": "93cc7798-2b87-4612-b72b-2bc6d3d91e36", "comment": "Malware payload (Gafgyt)", "value": "754e10f6ca0416cb56486737707c4451910bd0ec84022fcb2156330bd6a317e3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408696, "uuid": "87f9867b-c351-4291-96c1-67df2a156a6e", "value": "T1D6C30705FC404B27C7D23BBAF79E438D773666586BD733115A296EB02FC1B9829391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408696, "uuid": "e99e5c51-8165-45aa-a002-fd0a5b8159d4", "value": "3072:nFDcpqlgQSnoHyOKwrRUSyV7nbR5hLN/vi8bewsojUQQRh6RYAvZR:RRUSwnbR5hLN/veojUQQRh6RYAvZR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776408696, "uuid": "23ce35d7-59bd-400b-9d54-9adf0f125f18", "value": 128413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408696, "uuid": "a478d0ec-02fc-44cb-9bb4-62bdad82c481", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "008294d3-3a2a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776408749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408749, "uuid": "c1875146-b769-486f-b0f0-085269457cf9", "comment": "Malware payload (Gafgyt)", "value": "21546a1b5e243dfd95d72fa59b501726", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408749, "uuid": "3b305638-999f-4704-9d8a-162591537579", "comment": "Malware payload (Gafgyt)", "value": "fd3c466180447feeb0794564da5083be45a6ffafcd0423067bfe83062b4f0a11", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408749, "uuid": "4a5415b1-2e2c-457c-8415-df97f2e37ceb", "value": "T114D33B05E8509727C6D227BAF79E428D73335B68A7D733115A28AFB42FC1B9D1E390", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408749, "uuid": "e06040bd-2036-453b-b2dd-c9e508ce31df", "value": "3072:8pfNtKdcp3eQwPGyxPtJa2mgQupNOXPxu545hLturOw2gicfmyhQCYMhEFg:oyxPtJa2mgQTuy5hLt0O0myhQCYMhEFg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776408749, "uuid": "b4b72e88-5d1f-41c8-9478-c221681bfb30", "value": 142847, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408749, "uuid": "25e7c6c2-5b06-46e7-9fdc-659407457eef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "891d253f-3a2a-11f1-bc00-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776408978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408978, "uuid": "ea4923d2-825c-428b-a2b8-6393d9c5af5d", "comment": "Malware payload (CoinMiner)", "value": "5f21938486195078abd719382adb4e7d", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408978, "uuid": "def0360b-9b30-4c15-bbf1-1bc7ec974bf7", "comment": "Malware payload (CoinMiner)", "value": "f5421737ee11c560e8d7f6b487287dcb9ff69ebb8e7f4344df2f530eaf888fba", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408978, "uuid": "6109909d-10b9-42a0-a558-fda0ccb81785", "value": "T109463367F440E430E039203915EA44A2F07DFD7287314A8FA3AA3B359D796E92579E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408978, "uuid": "8f3d0691-f2d3-48da-8c7a-3c881bc593f2", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408978, "uuid": "3900809a-6344-4b55-a107-0ddabbff093c", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8Y:YBfTCiUswVSLOJgyBG/aO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776408978, "uuid": "5f29ffc6-8064-4768-a073-acb4fc3fdf63", "value": 5798912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408978, "uuid": "151966bd-027d-4045-a5d9-c1b4e9a97be3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9ab301a-3a2a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776409087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776409087, "uuid": "8b54cf19-6945-4b5e-9360-e7ec89605010", "comment": "Malware payload", "value": "12e9273b3a6dc94a646b14ecbb91b90b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776409087, "uuid": "b49c7b7c-671a-4dc1-ba6f-49434309a690", "comment": "Malware payload", "value": "d22bca52e7dac9471ec2acab55c843530c05ce728b8a3b7c9e9cd29a7ac4ca74", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776409087, "uuid": "fa931137-89e0-44fd-88ba-e926a45b6a6d", "value": "T189245B6D760519B5D526C478CB438413FB723C8A4361DAFB0B919EB60F375E8BB3AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776409087, "uuid": "b9e43f96-6b91-485b-9243-050cdb5c2932", "value": "88517da29bc1a9704a5f31cb7ac54821", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776409087, "uuid": "738a30ef-2d0d-4e42-a25c-e7dd93d6fa9a", "value": "6144:QGiVh8mAQOE1jpaaFcPutM7VVMUgrxChkz:3oAQOE1j27Vrg1C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776409087, "uuid": "672ea967-e735-445e-99a6-da12126d47e0", "value": 219648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776409087, "uuid": "73594c6d-f13a-4ec7-a087-ce579ffbda91", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4922a5a2-3a2c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776409730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776409730, "uuid": "0cc3b4ad-c8c4-4fea-bbae-3b30c9d37b90", "comment": "Malware payload (Gafgyt)", "value": "c20678555dce5681f8397e7489f0a08e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776409730, "uuid": "2e0a7863-7a8d-4f62-86a5-f12e63c2be3a", "comment": "Malware payload (Gafgyt)", "value": "3bfe374843d21f804ca0c3b18f609696896ceb01262fb3a6869a8322993de4f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776409730, "uuid": "820c2172-3967-4768-bdaa-94e6bc9bb357", "value": "T1C2C32993F801DF66F80AEA3605D34725B630FB620E931A7273573A669E362D47827F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776409730, "uuid": "9d109c8a-0e89-4bd6-b368-904745a46ebd", "value": "3072:BICcPeHR4p2ld0EjDRHty1K5J32Pw7icBJZxmva0PDGnSQNER:BICcPwR4p2leqy10J3Ew2cfmva0PDGnk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776409730, "uuid": "736f9838-43fe-4424-9b6b-5be082d24ddb", "value": 118946, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776409730, "uuid": "3d611e49-b84e-478a-a0c8-45d0f94cf841", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "785d83a4-3a2d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776410239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776410239, "uuid": "5cb46bbd-d55c-4f64-99a2-b850dd975b0f", "comment": "Malware payload (Gafgyt)", "value": "a516bb53e97d143beb709c379192bc59", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776410239, "uuid": "b9579232-e4dd-4e24-8607-2519cc8b69d4", "comment": "Malware payload (Gafgyt)", "value": "6f7aaf9ac08bce8fff788051d55116a7917c0cf3a69dd32ffff86d3cfa09bf4f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776410239, "uuid": "ba21a9be-6d3c-4e9d-a010-9596b6ac3fbb", "value": "T14BE3646E7E21AFBEE268C63107F75F708395219326A19382E26CDB185F7128D1C5F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776410239, "uuid": "ff7943dc-4940-435e-b83c-7c971406ca57", "value": "3072:bOwVZhQyr7g8+t+z5hKWL8YlxRxulq+1uPNd5R:6uxrUMz5hKWLblxRxulq+1uPNd5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776410239, "uuid": "ab10d382-43b3-4685-b4e5-f8f2c6ccd285", "value": 154580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776410239, "uuid": "f6bae394-c39f-439c-8841-8267bc784147", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8874753a-3a31-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776411984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776411984, "uuid": "2f882eae-7f7b-4e00-a538-b7727c43826e", "comment": "Malware payload (Gafgyt)", "value": "943313bf1a38548987a7138d98e58b8e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776411984, "uuid": "77f48b63-7bc3-4157-b823-02feadb5f232", "comment": "Malware payload (Gafgyt)", "value": "947789ee1dcabb73e7e8ac95da4ea1b890261f3486a1344fe4abbf87cac53030", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776411984, "uuid": "daaae8f1-b9b6-47ec-91a7-764c2c1dad25", "value": "T12DC3F805FC404B27C7D23BBAF79E438D773566586BD73311AA296EF02BC5B8829391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776411984, "uuid": "ac8b3eef-73af-4d62-be08-62e80fd1906a", "value": "3072:vFDcpqlgQSnoHy+Ks/uUlKQ1Vp5hLy+vPQbrlySMv3oCxDQlD6ObAF5R:5uUlL7p5hLy+voLmoCxDQlD6ObAF5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776411984, "uuid": "72e52574-d32c-44b5-9c1c-543d327b5f26", "value": 120867, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776411984, "uuid": "f6b809e0-0d84-4a69-9e1e-8faf791a8d82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b3c9ace-399d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776413648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776413648, "uuid": "1411ce7e-7f35-4354-9eeb-b0a67afceeaf", "comment": "Malware payload", "value": "834ea61693bccab352df29cab7691ea4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776413648, "uuid": "bf2b66dc-6496-4fa7-90b3-0b2a4985e25f", "comment": "Malware payload", "value": "88e637060a95acb513f475cbb3ee48ccd8de658e3f51c2ae07c5ce71dd356a41", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776413648, "uuid": "8c3c0a18-90ab-4f09-9b5d-030bfcbfccab", "value": "T17DD56BA688B1FF13B7AA8E4873341E5D101426370FCB150AB4BED7C67683A75346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776413648, "uuid": "fc04215f-0d64-4c5b-8085-ca75cf0e8b69", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTn9m3o17gAVSY28W:m0eF4xaDjDONijDG8ZxFT4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776413648, "uuid": "77e3913f-a7c9-4888-a6f7-53cd85ec22e4", "value": 2968530, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776413648, "uuid": "6ee54266-38a4-4769-b2c1-d03019fc1b3d", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776414379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776414379, "uuid": "24551b5a-38d9-471b-9e84-e99b04201707", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776414379, "uuid": "de69e0c8-4d34-4651-835a-21636fa50fbe", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776414379, "uuid": "e95fb0c8-d969-426c-8995-ac5c4d377c8c", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776414379, "uuid": "13cfad65-18df-4733-9ae1-6b870a838f7e", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776414379, "uuid": "c15cd709-c3b7-4857-9437-a200a11cd943", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccb46867-3a43-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1776421010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776421010, "uuid": "a2b03a0f-e849-4ffc-b26a-0ae6a5c032e0", "comment": "Malware payload (NetSupport)", "value": "3651cb9a4fdc98e024bfe58cf50ba116", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776421010, "uuid": "bfc0354d-7db8-4f66-b76a-566980b57229", "comment": "Malware payload (NetSupport)", "value": "77a3879cd56fb6acdb3eac64c371c35eefdaafb2a9023a4c580fb173b9441727", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776421010, "uuid": "94a2e290-fd9a-457b-bf91-05b66f61ee83", "value": "T11B165C0BECB94CE9C4E9A135843361477E6578801B2173D72AD1B7A82F73BF0987AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776421010, "uuid": "8a59a80d-6352-4127-b420-3b774d4774c5", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776421010, "uuid": "4e7558c4-b7c2-4da5-8155-4fad668b5315", "value": "49152:Lc8Z8Ul2h0K5j+O2iVfsa06BsijLm/molgqjlR/Qch32h:LcdhBsSO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776421010, "uuid": "d59f88f3-d4af-4b02-a97a-378614eeaf34", "value": 4028920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776421010, "uuid": "5f64ff69-7e2c-46a5-baf1-60e7b222e147", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34fb935b-3a47-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776421293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776421293, "uuid": "af78e99b-63cd-4856-a037-5fe7eaee34a1", "comment": "Malware payload (Gafgyt)", "value": "4f87305aa05396a4c45c355e1c9b7fb8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776421293, "uuid": "b440d8ed-a5dd-4240-ad1b-d523e07fc28f", "comment": "Malware payload (Gafgyt)", "value": "c502d9e1791943b3090170a45de5e278d275c5ed1b58cf1b3be5059c6e36f3c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776421293, "uuid": "67d42c18-ed7e-4b77-bf25-2f57ed63df50", "value": "T1A8B34A0758606F77C045AA7129F75930072BBA220F5F1B8A757DAAB4174F8DEB00FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776421293, "uuid": "1abac31e-81bb-4c3e-a7a2-b34426f5ad22", "value": "3072:FxmbUnP+Yza5LUMSEB5hLwoSCpLkC0Px9gQNfR:FxmwPDmyEB5hLwn0LkC0Px9gQNfR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776421293, "uuid": "6610671a-aafd-4359-9433-27cbd2355a4d", "value": 109055, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776421293, "uuid": "1b9773f6-d491-4eec-ad43-612e60ed9933", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac8c28dc-3a4c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776423641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423641, "uuid": "1883c50f-fc93-4144-a06c-a0bc7191258e", "comment": "Malware payload", "value": "c490629d97c3e2394595cc980f376238", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423641, "uuid": "b9e749b8-85be-4370-8664-e7c1f309d6bb", "comment": "Malware payload", "value": "ee00a8a0fa3f6257201bab8d9d74972ff0e72d2aab38137436cbb8adf8b09a0e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423641, "uuid": "87d891d8-3b5b-45bd-bea3-a79cfb806db5", "value": "T153A5F10CF6026D33D967B6BE509B6246E726B08115DC5D93A4C299380F2F6243F72D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423641, "uuid": "2ff5b45f-1a70-42b6-956d-e384a0eaeb86", "value": "49152:b2WlG46UXeWgj7XFkHJrNL/jgaWMOl3BUuQdHY:akAtkHdtHZwNQdHY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776423641, "uuid": "c7422758-1a03-45cb-b8b2-a3259d948e40", "value": 2149236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423641, "uuid": "ff6bce1c-f417-4a7e-8c66-00d30f1293a9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c5a490d-3a4d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776423855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423855, "uuid": "d5083168-42a5-45f1-868b-32e4e4a9488a", "comment": "Malware payload", "value": "bc818fb8ac44cc9da305c80855abeacd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423855, "uuid": "0492bafb-b513-459f-929f-a8583074409a", "comment": "Malware payload", "value": "42a6116b182798e627bbded8d18528e9cd7d37b42080aaa0eb0a40bc01669e3e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423855, "uuid": "48d9fcd5-7346-4871-b451-351b48df1375", "value": "T13C14DF26AC614138B37EEF7D77A2D348AE1043D58266AECCCC4436337E7A19A8DB57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423855, "uuid": "59d988df-87a9-41c6-9b8d-e880f2f81827", "value": "6144:rVXbdZ3o4PRIHZ/0oACxVAjF6L5aVtaJlmWOG6xSe5:xcYR+coACxVAjkL5aVtmlmW6n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776423855, "uuid": "06638473-c1cd-444e-b310-dfb5a84632b1", "value": 208971, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423855, "uuid": "f4ff4ec6-a306-4296-9f9a-d3becd8e0044", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b14de366-3a4d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776424078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776424078, "uuid": "ae9c29e9-56bc-48fb-aebc-4f68966e74f3", "comment": "Malware payload", "value": "a439f75cfe33a24e6d59e823c72bef7f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776424078, "uuid": "7d888860-9115-431b-bbdc-8fef490a3891", "comment": "Malware payload", "value": "5758d6927f3a02c91405e6759ded58d489f539aeb0138e270e3d4f0d5eb5f8d3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776424078, "uuid": "cbc8127d-a496-43b7-a5f8-23eb6cc46aea", "value": "T1E63402113B75861439D0620CF92358B6B84394BBE6DCADDE64D3A94B72CE8E36C8D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776424078, "uuid": "3a3376d9-ee07-4efd-bbed-9065afa75a5e", "value": "6144:M7PCFQr9mtGStBDGUfTEz/ufXCEdsAUh1Ht+r/WIn8jtgx:sPCFaAg0GUU0ySs5L+LWIn8j4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776424078, "uuid": "edfa57a9-412c-4298-b8da-58996c5c431a", "value": 247896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776424078, "uuid": "272f1fbc-8d2d-4b94-aeb3-ec3275a4c2fd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "451fb2c1-3a51-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776425615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425615, "uuid": "40193fe9-fdec-4dbc-b3a6-e38da49122d6", "comment": "Malware payload", "value": "fb50e3cdaa3b88c0274e935c8873d9ef", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425615, "uuid": "0706ad85-c5ef-4b2c-9e3c-2d4322291012", "comment": "Malware payload", "value": "d988a5cebbfed3ce821f2e556a1838026e8b31c77c719761d9cd00e442303164", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425615, "uuid": "46f2143a-0f97-4c76-9eeb-6486a3a74ef9", "value": "T157F55B9D068B71A6D7B93364417D3E2B7AB073119C73551AE8BD38D8CA382961FC2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425615, "uuid": "64f4fee3-3c34-4e70-8f68-dea511f6a202", "value": "49152:8UixbItdTrJoFVPMvXGoz+ML1AvFKhZUR5fv:7iBI/JoFdMPGt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776425615, "uuid": "22f85a89-2f9b-4fd5-8c87-7c56c578f377", "value": 3610789, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425615, "uuid": "a2d1dcb0-0dd6-4e8a-b517-dada86c1a7f3", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2154648-3a51-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776425905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425905, "uuid": "0d9e4d6e-a90e-4e89-97a0-c83f8f927464", "comment": "Malware payload", "value": "ad0140a6389c3b69da3675f130da4d37", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425905, "uuid": "00b77bb5-7d9d-48ae-8a09-a5b61f1cca55", "comment": "Malware payload", "value": "df689fce19bb80c8771559aa0991c305caf3f903885ddc6ef0c150645231b8b0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425905, "uuid": "159638de-a5e4-468d-bd66-b9c2664619a4", "value": "T14714E18C7549285ADFB333D8EA11E6B7CA8E0D71C01B9E4DAB0E590EDAA14777114F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425905, "uuid": "7613a602-abae-48ff-9fed-c88b3614e1da", "value": "6144:y5ZfgV4TlDzWb07FVSNf6NWLQKk23N6V0lq:nVgdzx7fg6NGk23N6VL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776425905, "uuid": "4b879d3e-1c90-40d7-bd5a-6a8897dd9538", "value": 208985, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425905, "uuid": "49bee9c1-7767-44e5-acf9-a463a92bd5af", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c4fba4e-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776425949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425949, "uuid": "86128621-2f55-4016-9bec-cfc6a26dd7a6", "comment": "Malware payload (Mirai)", "value": "4bbe607b2ba4ebe1f41e63adfc4a6a7e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425949, "uuid": "f88b9625-8b5d-4c16-81e3-62c3afcc28a4", "comment": "Malware payload (Mirai)", "value": "add97f691f8bd8af5efe0480a90f12bcdcfa089f7432088b4ff8bd0606ff58de", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425949, "uuid": "028b6868-babf-42ae-a64f-ba630b2699ad", "value": "T11864D08AEE00AF25E9C026BAFA5F034973774B6CE3DBB111E610D72936CA55B4F360", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425949, "uuid": "fab125bf-5d61-4680-8a13-21e68d0914b2", "value": "6144:p3lOYoaja8xzx/0wsxzSi5SDP99zBa77oNsKqqfPqOJ:p1CG/jsxzX5SDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776425949, "uuid": "2674bd22-5d60-4a5a-a025-7049a094e5b0", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425949, "uuid": "bc8dfe5d-fb41-48f1-aff7-80fd67cbdc24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da7af129-3977-11f1-bc00-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1776426790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426790, "uuid": "bd6afce1-7038-4442-934d-a0b7846f0417", "comment": "Malware payload (Vidar)", "value": "921e9a06c6e139b1d9abc6f7ae453627", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426790, "uuid": "ec733bee-df35-4a8f-a060-d55f4031f829", "comment": "Malware payload (Vidar)", "value": "0150605913e5cc05dbe79ed8f488d58140ac7c2853ca7853a7a78e9885628b9a", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426790, "uuid": "a10ff012-6a18-42a3-8f1c-17fde94b7039", "value": "T14DC58D0B6C9545FAC8AA973588B752A17B70B8090B3233D72EA27B383F727E15D357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426790, "uuid": "9bf15309-146d-4fa2-978d-bd44bba57fda", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426790, "uuid": "6c1933ae-ec5f-4937-859c-09ac5d38d4ea", "value": "49152:YF8Cb6nYXzguOQr1ATZToq+3rRgtwuskE+:Yu12UpTuN4wu3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776426790, "uuid": "e9e4d510-88e0-4dd0-9704-d7dd0e6d9860", "value": 2594520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426790, "uuid": "f9c885b3-a501-4199-9596-fe6bf8c37f58", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fafd7bf5-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776427208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427208, "uuid": "c4f70175-3b8a-477f-83da-4ef575f5e275", "comment": "Malware payload", "value": "69cf6ed0707291bb22ea20f142bd7966", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427208, "uuid": "29a7f59d-3e16-4567-a2b7-fad92f271bb1", "comment": "Malware payload", "value": "828f697a02fb2075007a437ee3eb0170ed3cac706fa61e945d8c78b2677a0257", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427208, "uuid": "acea747a-5eb1-43f7-8b36-f7bccc9bc920", "value": "T1311365058EE39D147377B0A1E6CE64097A9B40C74F4BAE243C4D92AEEF52774A1F46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427208, "uuid": "9da1af89-f9e0-4764-8e0a-7140641559af", "value": "384:J0FINvSo5o/Dw6Ioq47z2YEEFXBxBfZ4zLZP1hncu/tpbOfvuy/97M8T:OCn6Ioq47z2YEmXBxBshvbSZX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776427208, "uuid": "6fc147c9-225a-4441-a5f9-e80d0c8b8218", "value": 42574, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427208, "uuid": "e54f4776-7873-4b57-91eb-88e2b2163833", "value": "text/x-perl", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d448044c-3a55-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776427573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427573, "uuid": "14b7c02d-60b5-4b25-9663-eb5af824a8be", "comment": "Malware payload", "value": "a0e6a5ff59af48b1790f505d15ccf167", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427573, "uuid": "c44a7afb-3f7f-410f-bbe0-c3f815c0e6be", "comment": "Malware payload", "value": "d63f109c4dd08082327410682f864a85572b459220fa9bbe8e9a9297d93cf918", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427573, "uuid": "3a146234-5b4b-4836-9e1d-8fabee30eb91", "value": "T12E2533CE05BAA43649CE5B9A5694C52DF05CA33F0445E3DBEDFDE3C642FE2467A602", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427573, "uuid": "414cc5ba-14f8-4b61-8f75-85aa48926ebc", "value": "24576:wkSOZrLUAH8ZnFwfJNKy+CAwITXRFYJoVv8jNIesI5rq2NxR:wOgAHUnufnKy+CAwITXzFVUjNIeRNP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776427573, "uuid": "2a4a5420-2708-4d7d-a276-f8a5e7d6ea29", "value": 993378, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427573, "uuid": "74344f78-1d6f-4c66-8060-35c3dbbe1bf5", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a30ca36f-3a58-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776428779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776428779, "uuid": "833e5a68-90a3-4b55-8170-31a90ee0309b", "comment": "Malware payload (Mirai)", "value": "7053467fc5a36276de51d75697c68c5d", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776428779, "uuid": "efc37284-6230-4778-86ad-b48c4136ff56", "comment": "Malware payload (Mirai)", "value": "3bcc3ea4dfc287d8ef2801434b546699583a472dc234aa91ebde62abe64f3775", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776428779, "uuid": "04ef6948-81b3-4cca-bc4e-c3d0da36ae08", "value": "T164D34B07B4C190FDC4D9C1748BABB13BE977B1291238B25B2BD4AB272E49E305F1D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776428779, "uuid": "4fdcd12a-7f45-468e-94ec-4029636c7d05", "value": "3072:m0Y7L9uN7sAk5U1jnJKr4lKqX+qgHsCuvufiZCKmVJ2:m0Y7L9uN7sAki1j4qnf+LQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776428779, "uuid": "54305bef-9ae9-421b-88fb-e420f27e3a2e", "value": 139336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776428779, "uuid": "d1121c72-8eb0-4ac4-8895-bc327abb5b52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96a6260f-3a60-11f1-bc00-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1776432194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776432194, "uuid": "dd14df62-44f8-4e33-b7d5-b299c00433c6", "comment": "Malware payload (SantaStealer)", "value": "eab63c490102d94c5a3b3914195c3530", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776432194, "uuid": "f5647176-070a-4c8d-8f25-d11b83f35867", "comment": "Malware payload (SantaStealer)", "value": "8f3ddbc6090f6bbb75805de8ca284953696e283b438cfa9a45c3713c6ebcb70c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776432194, "uuid": "8db1f736-236e-4ca2-adb6-09da5f462888", "value": "T18267E0DBF60DB9B4F315956AC7D0EA086F8FF8B180E391A001D11B3396AE946DB874", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776432194, "uuid": "e2c808f7-89a3-49e0-86a1-36c3a5874bc1", "value": "5db62f1c7bafdda66124cfde5230bea0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776432194, "uuid": "37066fa7-0c01-4e57-9f70-eaec45860bf5", "value": "786432:hP1TC3oQmx3imvWEmBjsWdMruJZrize+SkjRn:p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776432194, "uuid": "a76a411b-a6a8-4770-947e-e047ea53563e", "value": 30016722, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776432194, "uuid": "99236a50-9d58-4bdf-8c3e-f22417c5f743", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc707aac-3a67-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435371, "uuid": "3c10a294-dcd6-46c2-bc89-647ee739df37", "comment": "Malware payload", "value": "c9d20fab1ec57961b0d31fdbaa55dc45", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435371, "uuid": "0ff8079a-b088-485d-baef-296b85c77a48", "comment": "Malware payload", "value": "9a39268e5a5343ecbb4d92bd81b6f5af4680f3dfd86c397cde57cd16073b39b6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435371, "uuid": "421fe7c9-66be-42e9-b6f1-198f48af2916", "value": "T164A395B3DA00666D07135F2CBB0A2329F51DB46673EAD7439B934D0294FCBBA14767", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435371, "uuid": "6d71dfa6-2e86-45d3-a9f7-2c865503eaf9", "value": "1536:qXFkooXVx7jsfIJFBI/T71zDxdSRdoGOnPTDf9zT4utdgPANeedoGLPx:q1UDbBe9nxtzghe5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435371, "uuid": "05accd53-6935-419d-b9bb-9540a803dbff", "value": 98742, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435371, "uuid": "0502408b-10ed-43d6-8017-8efc4749c7d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d5b9ab9-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435426, "uuid": "34c6d525-0630-4333-9c47-3a87f85810aa", "comment": "Malware payload", "value": "2e4387f25e0a375be95052ac1910446f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435426, "uuid": "fa52c77c-adc4-43fc-a40d-1663584cc1f6", "comment": "Malware payload", "value": "45e741ba70383b37ebaa19bf97b027523e15dacc73c908833fed574be2d7cbae", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435426, "uuid": "4f7adc70-5676-46a7-991f-2d6d72df52fb", "value": "T143A537E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435426, "uuid": "c32bbf14-d8e3-41df-98a5-8b664a22b733", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTA:m0eF4xaDjDONijDG8ZxFTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435426, "uuid": "43b7dafd-11c5-46c1-a9a1-80c4344f43bf", "value": 2153414, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435426, "uuid": "dee55e8f-f035-46bd-ba1e-fd55ed6c84df", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "439cbc58-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435491, "uuid": "a617a662-6fe8-4d14-adb9-ef4c1ae7f559", "comment": "Malware payload", "value": "fcccd3b77deb76f64324d2540de93359", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435491, "uuid": "f70db142-e4c5-4497-8590-fa9d1cae7f5f", "comment": "Malware payload", "value": "669dd0dcc525c461c785246ae8ef8c1250510a075fe3285d24e6a675ccb978aa", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435491, "uuid": "321002b6-378a-49b5-9e54-9b03551c12e9", "value": "T136247251B8E16091CAEDCE25739EED74C572DC304992FA46BDB0E8186C2D1C1FF368", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435491, "uuid": "c9cde00e-10d6-4aff-aa5d-c2850911d2d2", "value": "1536:kqMNIYHC7tLu/9qsCpqye8yvj+EAnfW6S1tvcDrfr67jQjHVhtI:k++sSoe8yva5nfW6WtvGrDMj2hu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435491, "uuid": "a9427c9f-7d2e-4282-bb53-6f1ba610b063", "value": 210945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435491, "uuid": "2050f36c-ac65-4666-85b3-07991a7ee151", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff4814b9-2217-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435550, "uuid": "c1d408bd-eb93-4880-be34-a87fed27fae2", "comment": "Malware payload", "value": "1d81e69e9601eecdd2560de2003cace7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435550, "uuid": "f15c6f95-ea60-4d81-af70-9b4c28841eb3", "comment": "Malware payload", "value": "26714ea9b11e26cfc15b3ebc4ff84ccf9c5fab1d9a1c037a60661a63d308c799", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435550, "uuid": "d0af5c97-2893-4463-ac28-fc7cd607505a", "value": "T1ADF37E6F036518C0AD09E34C6494AEF060E6F0FAFBE6825432C45B6422ED69DDB5CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435550, "uuid": "b76c73a0-b4b7-43d5-aea7-d3a7aa623f61", "value": "1536:2OEiz99KeWPp70GcgPf19p7pmOlqykd+ovcQz7hp4an:2Olz9BWh70GhPf1jpLqJd+ovtvb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435550, "uuid": "a1c9d49e-c2e7-4044-920a-d2d522d83855", "value": 167894, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435550, "uuid": "5c6bb17c-12b6-4185-bb34-b62b0ea6cc4d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67240e62-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload (PhantomGate)", "timestamp": 1776435550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435550, "uuid": "f74cef40-8b82-47ad-bd6a-05d2d77a2928", "comment": "Malware payload (PhantomGate)", "value": "1347c4f65f0b0a743aad4af708d11377", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435550, "uuid": "8ff825e4-a28a-4849-8f6c-4247f8a3c552", "comment": "Malware payload (PhantomGate)", "value": "8889b98a34c01a9e1acea11212311d40bbfa4539056bff1bf8572c0af910305a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435550, "uuid": "0dbb59f3-31ca-42f2-bee4-e911b1b8c97a", "value": "T11E84A5FA56175A9F411A0F24E50C0304ACECECABE3E691F5EF0E4DB69E5941848F1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435550, "uuid": "6dae0b38-8185-407f-8a06-14b50bf3a92f", "value": "12288:uYIeNJRuaDv0BNjFmPzJzQ9cnfdE6Cqu4xr3:uY7NJvG9EPVUanVErqu4xr3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435550, "uuid": "2c163b24-bb63-4625-b44f-8f97360f2038", "value": 398680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435550, "uuid": "683cd561-fa27-45cd-8e8a-b86111cb045a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8af78175-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435610, "uuid": "fe4dc1f1-d668-4f2b-a89f-d4fb35158fac", "comment": "Malware payload", "value": "09ad05820006fc2fb18f3610ed7ef0be", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435610, "uuid": "7c1ad77f-d96c-456a-aa56-b0e9ffc71fe9", "comment": "Malware payload", "value": "548335e7cebff93a419a4c2710b84166c8519186e4c16a2541bfcb1ddc866000", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435610, "uuid": "335ad2e1-5bee-4ddd-9dbb-e34e28cc49dd", "value": "T135143D51B8D1A051CAFDCF25729EE9348972DD301992BA45BCB0FE187C2E1C1FF268", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435610, "uuid": "5da91b2b-ad96-4eea-8363-2b24c4c5346c", "value": "1536:S5qdpIY7dzNX2OIGd9rE+zLQN/d2w1Sq4Ta6m3Lrc4K67L9O:h6qhx2Ve0d2vqqa6mvLK67L9O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435610, "uuid": "8192eb15-1a0e-479a-bd4c-4cb475cc129b", "value": 207351, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435610, "uuid": "c3c63698-c227-428d-a941-007835782188", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b2a406c-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435611, "uuid": "f9627b66-ea20-49ff-93c7-a0550f057e15", "comment": "Malware payload", "value": "61c2ee13f64a2637095380d7eca37ef9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435611, "uuid": "b4127bc5-4125-482c-93de-8f9e0647c572", "comment": "Malware payload", "value": "e69c44a71f958b738abfc8a0f0d40ae82c409994b60e5fd90c1860c1713d89cc", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435611, "uuid": "ca69b7de-f805-42d7-9605-71b817725714", "value": "T1D4245151B8E16091DAEDCE25639EED74C572CD7009A2FA467DB0E8182C3D1C1FF368", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435611, "uuid": "177611f1-0b72-4cd1-b301-dbe97a7fe770", "value": "3072:o8ehKTtZSvbPZ8M2cl82/4cJcHWR1fvpx:onhKTU/deK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435611, "uuid": "22be543f-a363-4194-aae4-f255595fbd35", "value": 211011, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435611, "uuid": "2b75689c-267f-4693-bec9-f703c3a74fcb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c321736-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435612, "uuid": "6cc601a6-60be-406d-bf1c-b284bb4fd1e2", "comment": "Malware payload", "value": "2b91749bf7e4f977802c9cfa64ab5188", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435612, "uuid": "739d735f-9243-4372-a04e-624106534f53", "comment": "Malware payload", "value": "ae8b6d80c5fa7f337656297648498fa140c02dad84468bbc6d8728dcbc541b37", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435612, "uuid": "fb372468-b703-4741-af36-972f6be31f9f", "value": "T10C246451B8D16095CAFDCE26B69EE934C173DC7059A2F945BCB0E8182C3E1C1FF268", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435612, "uuid": "ba55e26a-8782-481d-8f2d-7bf91c5e1a86", "value": "1536:KqjzIYmC7tTcRP0lsC/qyerIbLlwqyzjvh+3su5agJWqg1fvpu:10tsyRPKerIbWzjvh+35xJWR1fvpu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435612, "uuid": "f66cd092-5418-4510-8dda-755444c4ed3b", "value": 209847, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435612, "uuid": "507403f1-ee2b-4df4-8192-996c62a4028e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d27c946-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435614, "uuid": "e6535b89-e40c-4787-b4d9-802186c7e21f", "comment": "Malware payload", "value": "a83c64e8ee11d1445446ff1843e87f04", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435614, "uuid": "f057a999-bca2-43cf-a598-59427ae0deb6", "comment": "Malware payload", "value": "baf11de72dc44b1f24a5013acdcd360f8fb00bc1c0358026ad4a3b3a28d89ac9", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435614, "uuid": "5e988da1-31a7-4306-8350-b100d602cc5b", "value": "T164145F50B8E0A085DAEDCF2566DEE934C872DD7019A2FA457C71ED182C2E2C1FF324", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435614, "uuid": "ee168802-f1ee-4520-abfe-b8b21c5214e6", "value": "1536:ecqWmIYMdzNWYyEo1Oupb3vWLQNEVW4C32KDRqHI9ovErjQjHVhA:x3NhaELu3uPW4CnZIErj2hA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435614, "uuid": "a3646d7f-b9b2-4a78-a3d2-1eed721a6fd9", "value": 208125, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435614, "uuid": "2871eb6e-5c38-40e0-85d0-c87b4011f9f7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d29ed01-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435614, "uuid": "43ea4471-d46b-4702-a605-bc9f2a00d86f", "comment": "Malware payload", "value": "28b902b562938ead1f4ad73d11e2b153", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435614, "uuid": "99c3f98b-5ee4-495b-8388-acbd696a9e05", "comment": "Malware payload", "value": "5dd1af6b39db4eb2207da2cab159d58993e0eed3c72613645a99acd677a7920c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435614, "uuid": "943ff064-50ec-4fef-8644-7c791ddf80ab", "value": "T14F143E50B8D06491CAEDCF25669EE934C873DD3019A2BA457CB1FE292C3E1C1FF264", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435614, "uuid": "07ffe111-ad20-49ce-b8a7-e3d17324ebde", "value": "1536:9q3kIYSC7tqCPe1rE+WgELQNpb9fUkhgBnNjsjw00+oJWqg1fvpl9o:S1jsneEqb9PgBnNjmwMwWR1fvpl9o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435614, "uuid": "ecb388c8-cb3e-419f-94ae-c05f5cad1e44", "value": 206376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435614, "uuid": "70f42853-2e55-413b-a5ab-7eb5dcd391f1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d6bb57b-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435614, "uuid": "5eed4a60-f9bf-454f-810e-358c291f4903", "comment": "Malware payload", "value": "ec01b6da518254bb6d8c67f0f5d56397", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435614, "uuid": "f48303bd-0751-4a9f-8d54-2c6eb93addf3", "comment": "Malware payload", "value": "9a14b807f0cce126145285629319b29ffa03fcaa098e188db37daa072d9d72f5", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435614, "uuid": "e27da19f-f31d-4881-9c3f-0fd09b39b43a", "value": "T138145150B8E16091DAEDCE25739EED74C472DD300992FA49BDB1E9182C2D1C1FF368", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435614, "uuid": "43180980-d31d-4fe4-a469-698cc6b739e8", "value": "1536:Lq0UIYjC7tw87rE+VrAx1EcshKDpMPFW1m3Lrc4K67o97:rlSsVq1EccKFmAmvLK67o97", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435614, "uuid": "8a86b894-d21a-45a3-8ef0-a34f66ee2681", "value": 208602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435614, "uuid": "3c862c2b-fa86-4ba2-98ef-9f4600cd28c8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f8873be-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload (PhantomGate)", "timestamp": 1776435618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435618, "uuid": "74a1678b-a0b9-4720-9172-663d83842cf2", "comment": "Malware payload (PhantomGate)", "value": "8c76739aa875b6761a72ece50de894e3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435618, "uuid": "e2ffafda-20fe-444f-8b13-a7b3cbbfa0f7", "comment": "Malware payload (PhantomGate)", "value": "fc3f041b9ab2fb4ae1c32d8ebbbdcbb11823a2eea09f22ac88083055f5e248ba", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435618, "uuid": "05ec30d9-28a9-4e5d-8d47-2ed90cb3bf34", "value": "T11F7494FA96171A9F41160E25E50C4304ACECED6BE3E6D1F1EF0F4DB6AA5941848F0E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435618, "uuid": "2c9b7597-8426-4c99-a6b0-32ba83a3d18f", "value": "6144:YWGIT+e3XnOoLIL1vyaZLI/8BxLSfkA2VDQVQh1DVzjNf1xUj1H1pQ:YjIT+EOoL5/AksDQSh1D3Lw1pQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435618, "uuid": "bb098b22-07ec-45eb-b970-1140a2113dc4", "value": 361132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435618, "uuid": "947253b5-a6b8-4dfa-bae2-f71d2df7bf5a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f930351-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435618, "uuid": "89301f5a-0eca-462f-a94d-a255ffd7884d", "comment": "Malware payload", "value": "71864cf0431d1dfaf9c5d2fb39660e50", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435618, "uuid": "75afe4ea-1442-4a21-a20a-f3ba0fdeac69", "comment": "Malware payload", "value": "fd72c54e02996129b930e6274a43db696807e7528978c71ff1b9508392541529", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435618, "uuid": "f56cc005-51e8-4282-bb6a-15f9e1df4a4a", "value": "T15E246151B8D16095CAFDCE22B69EE934C073DD7059A2F945BCB0E8182C3E5C1FF268", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435618, "uuid": "25c0ffe1-fd29-4d6f-a454-9010d83e87b8", "value": "1536:DquzIYHdzNDFuU/rE+iXXgEy/hhY+1XGC52+cWqg1fvpnU:B0ahpFuTXwEy/hXXv4+cWR1fvpU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435618, "uuid": "c7fa8fb2-ec2a-49e2-9c3e-40e01c34b120", "value": 210180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435618, "uuid": "1d280066-0049-45dd-be7d-eb7e1cb882a0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ff3a41e-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435619, "uuid": "fb868162-5511-4781-9d54-d596afe416bc", "comment": "Malware payload", "value": "35d6057cdd450c30b01d4902962069a6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435619, "uuid": "4f84b59b-676c-4df6-81b5-0470b1fc6e22", "comment": "Malware payload", "value": "881b15ad8a194a26f23b81331cd6f0e8982224d5aa32c7ffdb02706d6022f9a6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435619, "uuid": "58a254b5-a54f-4912-91b5-6898a6cef01d", "value": "T161245050B9E06091DAFDCE25679EED78C572CC3009A2F9867DB0E8186D2D1C1FF364", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435619, "uuid": "9c6dc295-1214-43e6-aac4-e13a9265e671", "value": "1536:OqIyIYUdzNycv7z/MysCiqye8QmUkZwDCbj1Rod+D4Ha5ae/jQjHVhxk:aDlhAcvU5eZmUkZwDCbj1RTsHadj2hm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435619, "uuid": "391ca43c-894f-4337-9b77-b77bf299d1de", "value": 211050, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435619, "uuid": "5cc1f84c-90d8-437e-b959-51886dc1b99e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9028ef41-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776435619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435619, "uuid": "e89db289-fb98-44b1-98bc-435a1157c663", "comment": "Malware payload", "value": "b068573db57ff57f03375dff7577fee1", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435619, "uuid": "dc89be01-edca-4557-b41e-426404eaedf6", "comment": "Malware payload", "value": "40309c59c5f1e673b8f4ea6b1ffd97de94f62f906b974bf77aa239ca6664714a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435619, "uuid": "4d05cc32-9f54-40c4-b153-ce19bee887f9", "value": "T161246451B8D16092DEFDCE21B29EE934C573DD3059A2F945BCB0E9282C2D1C1FF268", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435619, "uuid": "f2bd2578-3526-4a05-a987-d0b250e05894", "value": "3072:zMRVsjeEZffZODgq6kkpuDiTYN45Y9ivj2hZ:w/srkH9iO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776435619, "uuid": "109e5a9b-f5ec-44b2-8ffa-57bbb69de061", "value": 210120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435619, "uuid": "c0ae14f2-75e4-4403-8c3a-283a955fdd5c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15c7952d-3a6a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776436273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776436273, "uuid": "21865266-9b29-4b9f-a30c-5522aad9bc28", "comment": "Malware payload", "value": "a83b39f647ef100c992ea19f7c5a9595", "object_relation": "md5", "Tag": [ { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776436273, "uuid": "581e4d87-c6d2-415a-b6b7-3bf7a47d85b3", "comment": "Malware payload", "value": "faaa4d005314440dfd7ed5fa2f522e1a2642f08ec3bf0c1e2779a39bf4268349", "object_relation": "sha256", "Tag": [ { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776436273, "uuid": "3f3ca757-234d-4d67-ab79-81ee04a2ab6f", "value": "T1A2462332FF4148B6C14103F5792F6E362F3E7B17494899E779AC49837B1AE805A2F0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776436273, "uuid": "8de6a9fa-2158-41e1-80d9-3dd581e16880", "value": "49152:6eOtozvwz4H9w+CRLHee+xnHiWIsdd3aUGhLOChYVFjdHZHCvAJ1egJYBrIfuim/:duim3YGGWF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776436273, "uuid": "5dc99ac0-8d41-4f6f-9d00-096703cc25d0", "value": 5853184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776436273, "uuid": "55198138-1e55-4302-9717-f3037da1e382", "value": "application/x-iso9660-image", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbffe770-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776437947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437947, "uuid": "cbab6aea-3801-4987-9598-5fb3db2ad50a", "comment": "Malware payload", "value": "35c11e3b16c6b0f265a356ba7a9693d5", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437947, "uuid": "4ce632a3-8e6c-4fad-9b04-fae8eec6afaf", "comment": "Malware payload", "value": "4bc99dc0a480c98f9d01874a625566f230fa164835e7a6714fa09ee8a395319a", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776437947, "uuid": "9e91b924-8fef-4392-9b50-8a7955e299c2", "value": "T1D4D423922AC67F9F0E445772152FA91213ADEC4C19DDFDEF663183EF62C06195E822", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776437947, "uuid": "87b7bb54-db0b-4a55-95f1-1c330d1caa37", "value": "12288:xz+Yrm+hFrCZsKEDLkje1Ytp8Ijlnf9/gYDSkhUPk1f3IRRWW+p5:Z+WlFRvDLk5GIjlf9/x9j1/CU5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776437947, "uuid": "6bef7bfc-5ac6-41f9-a713-75f4051d69cb", "value": 622652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776437947, "uuid": "cff2c24e-65e1-465a-b00f-a910edb4b186", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd74a4eb-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776437950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437950, "uuid": "10eaca4a-d05b-4275-84d5-dd8c8c25966a", "comment": "Malware payload", "value": "1f085a1673b50c0c4609ee1ea509c6bd", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437950, "uuid": "df3a0754-4d82-4299-b885-ce22d74baee1", "comment": "Malware payload", "value": "43038e4dc853addb47fc57e4b326553b5c719327b4ba8250c870a7331f9a8e04", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776437950, "uuid": "9f6644c6-d39a-4a8a-a933-9cbde3a231d1", "value": "T1C2E4239FDE62437280FB4A14DC2F1AC29B6B17698A876312E7241DC7611C99C3F8F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776437950, "uuid": "028ec8b1-fbb6-4f78-8f89-ac1d637e8678", "value": "12288:7JUSAKqMR5vSOCAea7l/NzR7GsPMYZq6l0awZdjEk5Xiy3c:V1AK1SOHea7lh1GtYo6CawZPtDs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776437950, "uuid": "6d8a8b0a-2be8-4fed-92d6-42688a715c5f", "value": 671680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776437950, "uuid": "f5f36448-92c2-45c5-be51-f59edd82e600", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "209c37eb-3a6e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776438009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438009, "uuid": "1e94be6c-060a-473f-ae8e-d6dca8e853d6", "comment": "Malware payload (Mirai)", "value": "2064e33cac1d2984ab6a861bc7e6a1da", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438009, "uuid": "596a988a-ef72-46f5-b62f-e7d34c6df84e", "comment": "Malware payload (Mirai)", "value": "1b3ba6b3b880ac4d194ed3d97cb0ad83ce7b28a301bab59f34c7fd3b2aff3cd2", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438009, "uuid": "cc864361-bd30-48ed-a380-8e6d4feb1e27", "value": "T15251FD9A02C49B31D65DD64FB7F4B174610AB0C3ABDF9A04E99C89AD8EC9D4C7385F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438009, "uuid": "b7b744fd-b651-47ad-906c-b580d59905d7", "value": "96:CovCeC2JMkbabbiBgn7nuZo9b+H676bwH5PPPA3CDA/2fQ6:Cov3ju/n7nuZo9b+H676bwH5PPPA3CD5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776438009, "uuid": "56ca9525-595c-4054-b950-2e82cff0742f", "value": 3131, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438009, "uuid": "cadefede-27c0-4ad3-8f3c-012d76c671c9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21accb68-3a6e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776438011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438011, "uuid": "c40ebedf-1fb8-4faa-9b9b-3f14953672e8", "comment": "Malware payload", "value": "2d03fdc5c72020dfb6849a8f96d929b3", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438011, "uuid": "1fd30ab3-1f16-4c98-a1d7-1b579ee1f416", "comment": "Malware payload", "value": "e03a635a0f10d6b8b77bbb2155c41b0f794e7d4943e9963e2d3cdd091c2872f2", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438011, "uuid": "30ae6863-016a-4ed7-a591-a53df6bcb3c8", "value": "T140F4230910FD02F666F2ECC055B60BF1FAD5BAD11737C34F17A63028ABD6922A4939", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438011, "uuid": "8881cdff-1ff8-47ca-89a0-3ca7775f0d94", "value": "12288:aukVWzOU/3VQwJSfVO6e/u3qZmvGRL8wwqudajQvf94C0JPfRAd6ZRSHA:auk4zOAVQwJ2sV/uXyg9da8CCQAAZb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776438011, "uuid": "7cd92693-a359-4051-8a38-b5ca6620f40a", "value": 768091, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438011, "uuid": "8c9a4507-f5da-40ec-a7a6-c4f501eff311", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "631c2a49-3a6f-11f1-bc00-82aee05be84a", "comment": "Malware payload (PureHVNC)", "timestamp": 1776438550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438550, "uuid": "e495b525-2940-42c9-9114-0b4480fb483d", "comment": "Malware payload (PureHVNC)", "value": "5c4d6f8e24bc7ec90ea04ff90d126c3a", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438550, "uuid": "d4c5fb92-a3be-4c37-a5f3-3efaa10987e4", "comment": "Malware payload (PureHVNC)", "value": "3d07c4fe368878d0c0d76e0f2c06030d947447d200f33b0b9e4ff0d8f431e7d1", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438550, "uuid": "00981e35-144f-45d3-b4ba-8644dbe421d0", "value": "T113D4AEA636634E12C2885733C1CB4901A3F597C67AA7F30E7585139719073BEDE4BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438550, "uuid": "6f3a8f45-7174-4e91-a449-f18ef556015b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438550, "uuid": "a203697c-e22b-405a-944e-fd374010a8a5", "value": "12288:l5XaqVASGkthd50un1a3TPtCgiHeJlVYHlHJvBUIn:M1OB0qajtXba3+w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776438550, "uuid": "ae44cbfe-5fc8-4637-a63d-33e96484f4b1", "value": 643584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438550, "uuid": "e7953b99-31ac-4f4b-b9df-4d7299361119", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b80787b6-3a6f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776438692, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438692, "uuid": "b5b2dbf3-0f3b-4b1d-9417-53e309be7f1f", "comment": "Malware payload", "value": "6364b53640d018c5d7c1323e772c0e99", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438692, "uuid": "4679ad96-493c-4ef8-9a7e-ef2cefcd193b", "comment": "Malware payload", "value": "2142fadeaf109ca920ab1f8a9a849635390977a131d75adea805fdcee8edaf06", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438692, "uuid": "61748bfc-7cff-432d-952b-8fef757be893", "value": "T1D0931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438692, "uuid": "3cbb75c3-fd18-45dc-9cd1-f0dbe39af4a4", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJKL0sCxKwoh:n8iIL0GitkbFv2v05xLkre0sCxjoIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776438692, "uuid": "7b101d8f-74c2-42c6-a97a-d7dcdd4ae1f4", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438692, "uuid": "99a6cfc5-e83a-4a8e-876a-5014bada367e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f017fe3-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776439509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439509, "uuid": "75c81137-f3d2-4dc6-8c7d-25b5fdbad4ce", "comment": "Malware payload (Mirai)", "value": "87e93207eed31f07958c608f23c35bf4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439509, "uuid": "fea0af89-61ce-4a33-b8d1-de39b47da4bb", "comment": "Malware payload (Mirai)", "value": "2f76237831c36b720f96d8061012f63dd3d4ea1b60772f6d17d7b51e7f81597e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439509, "uuid": "d20eeb65-775b-4650-a21b-86e6991e0698", "value": "T1A64302717E58327074B93AB478E58B83962E4E85BE7A30705BEE19FC918B046B1FC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439509, "uuid": "d88051da-210a-4057-b451-8cd682d66457", "value": "1536:XQSaEzpAaza9tw0UVeVMn7sRVoHi9ueY2g9h:gNElA39taOei9nQh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439509, "uuid": "4c168508-2b17-471a-9ec4-a7734ee84c62", "value": 58620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439509, "uuid": "9c8a3cf2-66d7-4b4e-8e22-fbe3cc780a58", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0cd4b01-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776439512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439512, "uuid": "c0e2dc73-9da4-426a-be33-dc21665595c5", "comment": "Malware payload", "value": "e1390a13b62ee218b3b66bbc709c0555", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439512, "uuid": "ef650c22-5230-4174-8448-96b9dad74c26", "comment": "Malware payload", "value": "e007a72eefbb37d4f8f200edbe3ae06ad9a2569a1de70c09196a16d91081480a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439512, "uuid": "caf6265f-223d-4c36-8842-b3d79679b505", "value": "T1E74301ABC26294A6CEDB8D3C40FE35311DC030D1735D9F8E13499AD9FE6B94BA51A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439512, "uuid": "c2ad1fd7-ee17-4993-9039-1bdcc3f25319", "value": "1536:ZzbmdcIvs+XYN+Z+eRGbG8F4AlWoVTxhvcb8mu:tuc8s+XYeRG54AooVTxNcVu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439512, "uuid": "a525c5c5-6c7e-42ff-bd56-e33ac1e87bf3", "value": 59420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439512, "uuid": "8f2cdfcf-4096-4929-8b98-5709391b0949", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c591fa67-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776439574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439574, "uuid": "94f17735-b760-4d15-a968-3fa5dd8f51cc", "comment": "Malware payload (Gafgyt)", "value": "c222b712806ebb6a601272df90353d27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439574, "uuid": "d63fea3e-2643-4c55-b056-780735a0cb3a", "comment": "Malware payload (Gafgyt)", "value": "4828d141d7c6b23d0e150aa5e88b812edfaa80ed31fea8f7b6e960144e96f58f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439574, "uuid": "f6c80fb0-1eb7-40d3-aaf7-01340d1c1c12", "value": "T11443F255F2BFDDA8C7B61C7201EC0056F7957D2227862BB308C512FEA512A46AF352", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439574, "uuid": "99a840c6-1770-4f4b-86c6-d81992533f2e", "value": "768:bGlZwyTPlxj+6PoBQKwOiNRsls9fh1m9I5DAz/ihlisNsEdU9+eNsq+zA8KxdXOJ:bkpB9+Ign7qRTDvt/NsEkrOFuuF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439574, "uuid": "d1a00ffd-0535-4db8-ba03-22f46478a446", "value": 57648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439574, "uuid": "2f348e08-a105-44bc-8de0-a5a2a6f84ad6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5a0d76d-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776439574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439574, "uuid": "26154657-ebae-47f6-9155-a6935111c9de", "comment": "Malware payload (Mirai)", "value": "c46ffc0e44dc51a2258f547943083542", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439574, "uuid": "b7c7eda5-fb42-45d5-a1c4-671dc430982d", "comment": "Malware payload (Mirai)", "value": "aec7929432c48afe30fd6be9e86b576e980bbfcfb11f6ae5e2bcd8a7505f1cf7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439574, "uuid": "0316cba6-4bf6-48ab-9085-a69314f45b54", "value": "T1B133F1A2A38D9A59C7694C3B0D8B3F0F2539A71D8F5601B12D6C11292C9BF45F36E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439574, "uuid": "2dd9c610-420d-4c9d-8cb8-0430d10df253", "value": "1536:cLUxKzNNUip1vIHGaMJ5lVstfXM1jO3pT7nouy8NqV:yUxKzzPp1wHnMjlVfZO3FoutgV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439574, "uuid": "be086077-e324-43f9-88cc-d770a672ffa4", "value": 54532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439574, "uuid": "50c80034-70d6-4d94-a78c-f8847513b6f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5b1ac3b-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776439574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439574, "uuid": "59803e5e-4a01-4ba8-95f7-26c4fd607f4f", "comment": "Malware payload (Mirai)", "value": "9fa3e4cb407b4a15244191292efac441", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439574, "uuid": "6226f96a-85d1-4db1-8044-f69b528d502c", "comment": "Malware payload (Mirai)", "value": "bd275f5b00c77a9fe5e2ce262693e820b22ab5515ffdbff1ebf907c50116b439", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439574, "uuid": "43592330-ffd2-4ef1-bba9-87e27f1ddf37", "value": "T152141D32985CCA87C526127D60E9DF7ACF7E72DA2746CD227CD451348AC7E9B7806E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439574, "uuid": "075b6498-ec49-4ff4-96b1-d811a36c596b", "value": "1536:HM6kc9KcdvWtzjE3vUcoKVNWjFnD8W/Ctyr/4fNTlK+pK7DKrtwp+Vp+wEiwnP9Z:s6kc9KWvwzQPV0nD8UkNTyP9Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439574, "uuid": "35f54877-ddd2-43f9-98f9-13603e8cad0e", "value": 190560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439574, "uuid": "7d7f4e50-63f1-42a2-aa41-af359e3d03b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5f1697e-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776439575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439575, "uuid": "81239314-0b06-4c5c-91fc-3fb1aa3a1d62", "comment": "Malware payload (Mirai)", "value": "c6578bc6fe6bddec559377e34fbc936e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439575, "uuid": "036c9b8b-436f-4bf7-bfc6-f582e56d0cc0", "comment": "Malware payload (Mirai)", "value": "2504bb7c770ac142d1fd4d36a8ed504b9f8b111d7c76ae53dda71f04a6185612", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439575, "uuid": "13776c91-f385-4120-86ef-86d5c55ce03c", "value": "T1DF8312D69A8D83A5EE67BC35DB3E8E33A525476D07413189F8C087197DBAA8023683", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439575, "uuid": "492ac15d-0091-43bc-b416-5d052d97f3f8", "value": "1536:VdfyC+aPw7a8XSGMFvEOpsBVugBeMKr7oqOzTiufSAxBqK6:3bvw7a8XSGMpXgBS7/pufXqr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439575, "uuid": "1707adbc-aed7-4256-8c96-8074cdfdcb44", "value": 86924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439575, "uuid": "e5bd4652-9843-4f67-a03a-edf5fb59b860", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8e28b40-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776439580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "f35864c4-49d6-449e-acee-ea4c5fe8d943", "comment": "Malware payload (Gafgyt)", "value": "fbde4648edc3c5e2f533244feb87236a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "81245d65-80d5-49b1-b849-3445aafbf3a0", "comment": "Malware payload (Gafgyt)", "value": "4573480fccf2943c780c4bfaddb8050f4bb589c4c58e17640a6c9035653d0de4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "05dded66-b355-4cac-b32e-72bb4be716d3", "value": "T1C0430229175208E1CCA8C4F75BAE129C3C758FF3A962E48F560DCB59ED7107AE409B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "bf321602-837a-4582-8e21-d22548ecb4ba", "value": "1536:6K7LSKy35Azdw2mXdh6OBVIzVYbIKmk/iK4WFE/2mVlVrYW:6oAYi2mXdhhLmVyliKQNfVrYW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439580, "uuid": "c1bf4d0f-31da-4978-9fd0-98ce39f625c5", "value": 58616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "3b3834e3-3cc9-4d55-a202-c6845ac7e15a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8e2a411-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776439580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "988bbfdc-f418-431d-a577-ac416ad3e366", "comment": "Malware payload (Mirai)", "value": "d22de2ee4e454674ec20fd98cd03691e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "6dd372d3-f618-4a3b-a9ad-b49cb0089482", "comment": "Malware payload (Mirai)", "value": "5fe31001fd5c9c367fa4d13b1218e7408610396feb5a93fa6e05e595583f37b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "ff8e42b8-1fc3-47c1-b6e2-e4ea948e810a", "value": "T1415302F3E1CA252268A04CB8ACB78119D5215FFCC0BD1AA5392D69507F664CF83AF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "4352af78-87cf-4598-96a8-289fd8133b1f", "value": "1536:ANWX2Gc7l37FnwJM3Gt3pS41oIMzHsvTWwIAj3GBf0asHj9:ADGc7bwJM3GtZSPvgIaHJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439580, "uuid": "0d511c6c-af2c-419c-bc06-49a58abdc27d", "value": 64408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "8f76aa67-cc5c-47eb-9631-520e1408e490", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8e56b20-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776439580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "748b8e11-526e-417d-9bba-1c0329d523be", "comment": "Malware payload (Mirai)", "value": "31f390fc1f0b87cdede503fc7cc66fc5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "e59b27f4-3bfc-4767-b40c-d07f0f4769e3", "comment": "Malware payload (Mirai)", "value": "6d0ccf790ff27fb69bb64e8f0d0a3b9ea6b250efd79ee7cd6fb93fe9d12dc09a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "da37f9b3-1628-4128-88d7-00277eea2812", "value": "T1DC248272989CC587C122627D60EEDF7ADD7E72CA2648CE017CD118399AD5FDB3A06D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "faf21605-a3f8-4b04-92a9-2ba31094cd59", "value": "6144:bwL4a7BE9vXgNEjExiE4/+tLr9PVk7UFb0q9XjBZn3CxOM+lT67KO:bwL4a76+LO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439580, "uuid": "4863e146-1312-4c54-9383-ac7d1a5cd3e4", "value": 215148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "1f96b179-dc1d-4fe0-82bb-7b6771247e05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8e8dda5-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776439580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "ff0d82f8-f3a6-4ac1-8384-520f79ba2ab4", "comment": "Malware payload (Mirai)", "value": "9f41c68cf6184c5b698ebfa444e6a763", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "075165d3-de77-4b61-b3d9-164e53c679b4", "comment": "Malware payload (Mirai)", "value": "f96cf5df19e0e98426e2d7584a789a36474f715895677dc0e417ed3f82e84253", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "1caf7510-baa9-44e9-922e-be8f7149a1b3", "value": "T1EA145F72A94CCA87D826767D50A98F3BDD3E73EB2745CD017DD1203689E6ADB2807C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "67c3a1a5-d231-4708-8bfb-db2b65b33741", "value": "1536:D1Qt/D6d9H8yciWZ/168S+hfPgXMMnhiGmmAoIswLw8yfItTHK+xK7jK5tup+zpH:+acYWZ/thAMoonDLw8yfItTHvx7DWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439580, "uuid": "a61e4a70-b5d1-4793-9d88-abdd497b01ff", "value": 205168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "58ee57eb-f365-461f-a6d2-1f970a8711e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8ee9c1a-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776439580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "0035bfd1-6354-4306-8db6-6f0928dac070", "comment": "Malware payload (Mirai)", "value": "baf56d138828bcfd6fd8b52420c9169c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "d028342e-852a-4fe9-9ac4-481086458e39", "comment": "Malware payload (Mirai)", "value": "dcfb97240032fb05f7b35ba963d8ed2be49a766976383dc1d9e71d1ea1ed1b07", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "61059409-7fdb-43e6-abfe-5273f9377431", "value": "T14243F164D1660C19F2F5E77A29B90AD27AC097FD71ABC83B310867A647308BF10D56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "3b9cd3d0-528c-4f79-b29d-2088bee0acce", "value": "1536:ULJgl5oH4BiC8sOti7Fi2ndiL2o2EK/x3x0xrSu4u+qgw06WXl:ULGMH4UC8s1tNBJUf4u+qgwXW1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439580, "uuid": "ea9adf22-d122-4943-9d46-b0e28e718855", "value": 56064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "736f6844-3a61-4d01-a115-be909ba8f2fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8f5f3d6-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776439580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "369d6dec-3764-47e0-acc7-aed6fa5ab3d9", "comment": "Malware payload (Mirai)", "value": "640995548918da036e53d491ba236e6d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "ad4dc639-ba86-408b-a805-8aa126d088a3", "comment": "Malware payload (Mirai)", "value": "b63290159d4975f21dcf3738f7593221b86a680116101d11e7679861ea582495", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "fdbfa75b-9b18-4e1e-8f66-7bd10286920c", "value": "T1A3F3F971984CE6C7C53321BCA0ED9FBA8E7E72DB2B59CD027CD151309AD5EAB2906C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "67b8a51b-0338-4123-ae7e-5b7bcf0235a3", "value": "1536:wrUk158gadBSgy5vNK9rTt5dJHK+pK7DKrtwp+Vp+wEiMc1l88j:wIkL5vUVTt5dJcc1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776439580, "uuid": "c4f51a57-fd7d-4a20-aaf6-b2cf8a90d029", "value": 166040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439580, "uuid": "772b68e9-a5c9-447c-a018-34a3e86fc435", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e55e844d-3a7a-11f1-bc00-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776443493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776443493, "uuid": "97a2bdca-9055-4711-998d-639bea207a23", "comment": "Malware payload (CoinMiner)", "value": "d537bb61fa5596cd4dbd2ec30de2d13e", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776443493, "uuid": "5f130b65-229f-44e0-8c73-178cea41a123", "comment": "Malware payload (CoinMiner)", "value": "8f28ff45e6f289ec3f74578f4501bd6a842f95a79940d218cd593732ee4ec2cb", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443493, "uuid": "540c51a0-e2d8-4818-98e0-bb63f6c7a485", "value": "T1FAB52315B8C090B2D03A143619F986B4B43DBC314B6986DFB3A57A795E303E42739A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443493, "uuid": "1fa4b103-3452-4a6b-8aea-fdcec637cb15", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443493, "uuid": "aa3e1be9-8268-4037-8add-a919be9b2518", "value": "49152:R3XTWsOBDNQ2iselXOfTITJR0nrtFPpXmfiSLI4:RLGSThOfTCiFBXmfFs4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776443493, "uuid": "d9503601-af65-4239-9576-39c7822f24ee", "value": 2448384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443493, "uuid": "34b895ad-89f2-437e-9e7e-7bc53e5f1a8b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8865d2c-3a7b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776443847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776443847, "uuid": "adc92091-e118-4a3b-924c-126cb41fe145", "comment": "Malware payload", "value": "cb0feb0fe6d1f291df86e4767005e25b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776443847, "uuid": "d37c1134-86ba-406f-a3f2-d648c5848b54", "comment": "Malware payload", "value": "5e031b7c223e9e33961141192cb9a69c8ac29797af7e5609e37b7f149e243c0e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443847, "uuid": "a2e56460-8ca2-4064-b097-6fa14451be0c", "value": "T1CA8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443847, "uuid": "46dffcb8-85fc-490b-9c0d-5159e7edd06e", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn0WazVN/:XEKltp9txAX/yr2pb0WyVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776443847, "uuid": "488ee68e-bbb4-472a-8128-5bb28040fe73", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443847, "uuid": "5d75772e-8f3e-49aa-b192-24b4b7fbd444", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8832419-3a7b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776443928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776443928, "uuid": "7085b9f3-91da-40a5-b1e5-c8b2b7cdd905", "comment": "Malware payload", "value": "273eee681a792163469604170d9408f4", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776443928, "uuid": "3cad0e60-d389-4697-b5e2-415126715643", "comment": "Malware payload", "value": "40609a78140e6b2c500682fcce6d507e97b7381fa9931d547a1483e1631891d2", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443928, "uuid": "d47ca4c1-9d27-4c47-adee-7eeb8435c380", "value": "T1BB753385A697784C1DB3C523B1C77C60E8A0F1C53E67B81E3419D1713BA9FDA2AE11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443928, "uuid": "9e95538d-9efe-4cda-a68a-f1634a2d3ee8", "value": "49152:/0dLHcFLEnddXQY+bugDO7hVahyxvNw5r:wLMkHXQYLayRhN8r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776443928, "uuid": "6cc19081-4b03-4b8d-977d-462e22a2ecb0", "value": 1695153, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443928, "uuid": "5eb97896-e9af-4518-99dc-07634f8e3a67", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1903dab1-3a7d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776444439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776444439, "uuid": "f1b97e64-9055-45eb-acae-70a59d93447c", "comment": "Malware payload (Mirai)", "value": "820afc405bc29e457059ab7215c82acf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776444439, "uuid": "62bd56c8-47a9-4dc2-bbd8-f501b68b9b06", "comment": "Malware payload (Mirai)", "value": "aa610c3c269bd0aff635dfde2741234a8247dee9c44a9eef57468b402fa86627", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444439, "uuid": "40226750-ec89-4186-841c-7d6a9e43db7d", "value": "T11493021667978075CFB0A09331A80CAA2D1279B496FC63031FDB2A6077D6AC48D437", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444439, "uuid": "0a1a7561-1b4d-48e0-8981-a89a9416db53", "value": "1536:z8lECoavVOGLz+XP5c557hf38v16QtFqHODF6pJnELohyc3Xu+FEYkaKhYFi8d:IlPoatz+i55N3EXWuDQLnELohycuJYgU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776444439, "uuid": "8c8c972e-9b84-4b17-a9f9-a477a5e9a2ef", "value": 88908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444439, "uuid": "75a7267f-45d3-466c-8d56-952e6e247f2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46d52dd5-3a7d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776444515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776444515, "uuid": "a54dea76-2aff-48eb-8aab-c275b59a65a7", "comment": "Malware payload (Mirai)", "value": "bfcc92dee5878276502a311429d52dc2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776444515, "uuid": "7bb48c84-a38e-4b78-9308-0c79ca8c300c", "comment": "Malware payload (Mirai)", "value": "9a9eaa133742b91a720a0f5c7e8fe400fb4ba19b1ee8a75a01e2e3eb55729437", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444515, "uuid": "aebf2fe2-db7b-4e3b-bd8c-bb45bd1cc302", "value": "T1D07302F9594C5418C7F0C2F382B913509C70AEF612416A429942FF61778EAB26BF6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444515, "uuid": "5e9274bf-084d-4732-9507-24e13f6c59b4", "value": "1536:FO1QVL2D9fy9fMPHkw64KTgShjSvAPXbYkD7GHtoQ0PalY/7VJu8:Xm9i8kxNT5GcXbYkGHeQ0Pal67VQ8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776444515, "uuid": "af74061e-3660-42f6-a692-1a81c84e4354", "value": 74456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444515, "uuid": "b37b7abc-c616-4f3a-b599-521aa6d9238b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31c3a381-3a7e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776444910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776444910, "uuid": "82dc966b-3083-4ed2-acb8-32134bf9b1b2", "comment": "Malware payload", "value": "bd7183d07261cfbd925070d0e221d16d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776444910, "uuid": "53a8706c-acb1-4ebe-af0e-cb7cd5d45b8a", "comment": "Malware payload", "value": "24ba4bc35ad0bdbff7a804460ec998ac179da3e052b491034d1c75e84b4b188d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444910, "uuid": "c519dc37-fdfc-4ff2-9d14-1bfe48c9af1d", "value": "T1015412EF3DE1CE4A263468636AFFB19D464C73F5AA510E7E7052FD02891C5AC98705", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444910, "uuid": "1e575e5a-2c09-4f85-9da8-1e01f969c4ba", "value": "6144:mmSBGLsuWDZ/drcX8Lj4MUZv/zIhdr3vvvvvvvno0CI3zJcf:1Sasbl/dc7vrI33vvvvvvvmYJcf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776444910, "uuid": "fdf16220-2864-40a4-903c-50d10780e5bd", "value": 283721, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444910, "uuid": "5aeee66f-bf51-48c9-8caa-41254101b218", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4b5ca79-3a82-11f1-bc00-82aee05be84a", "comment": "Malware payload (PhantomGate)", "timestamp": 1776446955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776446955, "uuid": "b1c40ef2-6a99-4341-b0a7-1e4472c6dbb6", "comment": "Malware payload (PhantomGate)", "value": "1f939d494c97df2a33549597c2793efe", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776446955, "uuid": "a073b419-92fd-4543-bbbc-496b2b593e90", "comment": "Malware payload (PhantomGate)", "value": "25ad732e9851cad42d1a88c96bb5814c128a3fb73a1ca7d0a37de70d7cd2ac32", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776446955, "uuid": "683ea29b-ed73-480a-ae69-797d7d541aed", "value": "T12C520BBDC9D6BCD0871B62D175E9BBC1018F8B13BE6B2B2CF5D814610741399ABB84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776446955, "uuid": "3f3c8746-0d4e-437a-82bc-fd4e32879577", "value": "384:ljm4srGzkkIh/Ksob/moCGQDF9yxucKklJUrxe732OW/Ta5+dZhgqsStXZXwrmhc:ljm4w9FjoLBCP9IN3/p5oQStJXwzY8Ig", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776446955, "uuid": "e38a074e-d989-4307-aa2c-3f61fbf50917", "value": 13492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776446955, "uuid": "bdc74223-5d1c-4aee-9095-371372a1cdce", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b2e6ebc-3a83-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776447234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776447234, "uuid": "4db1adea-3181-49ba-a20b-32ba3335a7df", "comment": "Malware payload", "value": "baf181ba878055335c6571cfdf410b04", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776447234, "uuid": "5320a506-0818-409f-891a-2603c88fedbe", "comment": "Malware payload", "value": "62c8864add4eca1734f1beff03cf0c0d5c2033a5f6ba382b813e3dc5af443827", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776447234, "uuid": "5f117d58-997e-4a73-ae7a-e3543aa71c1c", "value": "T150F3DFF77300927BAE79C86BBB1589C950EABF1143E030A2DF8E799494A4747E1347", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776447234, "uuid": "49f56ca2-99bc-46b4-bb3c-2559f74e2fd1", "value": "3072:2I0BVk3rkMNAuY6J3uRtZfrFjQGTWG8Ll7XGIYn4d+zoK5:bfEtZKh2V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776447234, "uuid": "da17922a-f803-4b37-82ce-47eb000ca14a", "value": 172664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776447234, "uuid": "eeb9a059-e737-46eb-a0a5-b43f004d3990", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf0887a0-3a83-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776447321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776447321, "uuid": "49e28328-dd3f-496c-95f3-9d29f8ce8836", "comment": "Malware payload (Mirai)", "value": "1ce6beb1020abc256be2c58352d98648", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776447321, "uuid": "947152e1-9a85-4d59-b6d6-1e7d23536373", "comment": "Malware payload (Mirai)", "value": "ceb108d4d8497ed2f0c8b1a2a65d746aa4a4ac6525ae32997d99ff195f6149bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776447321, "uuid": "8db8013f-2683-4a03-a668-5c5c54d69bb7", "value": "T1EC730234AE73FC53FE1884FE866B108A9EE12E8CD1E9B911560610E990CD173760D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776447321, "uuid": "4a8855be-d3f0-4c07-96ce-5a8e40e62d20", "value": "1536:MPrt6flR7Gzq39eKt3Jh0CxHwJ6VYF6aK0ti5z5Rl2aoAwBiLg:MPrtElRS2tftzHHE6WFBK0w5/l2aooLg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776447321, "uuid": "9cdf02a5-b2b8-469f-ba42-2d11d239cf97", "value": 73580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776447321, "uuid": "0369da25-3359-4e32-9050-50c6b7abbc19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f74d8d56-3a85-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776448247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448247, "uuid": "06377085-a110-4911-8160-7a7de60361cb", "comment": "Malware payload", "value": "ac0cb082c7ff4471612a4a71728fbca9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448247, "uuid": "5318a0ed-87a3-4b0d-90a1-214cef0ade30", "comment": "Malware payload", "value": "83b06b5e253d1c63f32b3462d6c1ab48fe454d54bc12a5a490546ad2c7dc74d7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448247, "uuid": "530f7740-452c-4071-81c3-77d2fecefffc", "value": "T10193E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448247, "uuid": "54a8c5b3-d2bb-4d41-ac04-d90931e19503", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXeIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776448247, "uuid": "1521f6a6-2437-4908-8d72-ac3495470205", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448247, "uuid": "23b7a05c-e565-4de7-8409-ca4f44bd0c95", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b10c5a5f-3a86-11f1-bc00-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776448559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448559, "uuid": "c08ae6ff-0969-4929-ae6c-647c32ff2693", "comment": "Malware payload (CoinMiner)", "value": "a427d0969bbb794a9cd8ccfaf1fc9b95", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448559, "uuid": "878d8e55-e82a-4320-9d5d-702213ac2f0c", "comment": "Malware payload (CoinMiner)", "value": "524ce50cb615ddc613ffd1f460f9cd6239a65797b5aedc3a89fd63c3eb2c33aa", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448559, "uuid": "cae579b5-5295-4c28-877c-b726e4b2eae8", "value": "T19A063315F880A072D039143615F989F5B03CBD7157255ACFB3A93A714F383E8267AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448559, "uuid": "19a84d15-d8fa-483d-940e-4b6000c200cd", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448559, "uuid": "7c1d5b6b-560a-479e-be92-6e84c763c809", "value": "49152:R3XTWsOBDNQ2iselXOfTITJR0nrtFPpXmfiSLI+VxBSTkqY3yZYIL4XKIK:RLGSThOfTCiFBXmfFs+JMHpt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776448559, "uuid": "a1c6f814-7e21-4088-b849-4f3b423ffdf4", "value": 3832832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448559, "uuid": "0032df90-aa4a-4d76-8d09-2eeee1951292", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0700fd0-3a86-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776448612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448612, "uuid": "00ee535a-0c2a-4c9d-b1b2-620e9f82fafb", "comment": "Malware payload (Mirai)", "value": "4ce67be1f5a7367a673b9f65f0ac22fe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448612, "uuid": "28927980-eee3-4d2e-b738-212c551062ed", "comment": "Malware payload (Mirai)", "value": "6cecf4baa5145f85c3c30713dca1ec0afad5c034de67695ba357e34e2a94f900", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448612, "uuid": "b5e5350c-9436-4f94-9320-a6e4732a54bd", "value": "T10E7302CFF3A4B59DEBCF987B018583754F01E991F2A9178C87188CAD960F98B180D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448612, "uuid": "fc309e47-0751-4e3f-bc00-5c9b5b16eb62", "value": "1536:UGqL761kWwRp2lDUfaxd8axD3H/zvOx7GbsdbHFFLrREKH6SAQdfQ3j7F:dqv61HwPgDGGDzVgvtZSufUF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776448612, "uuid": "8de6c0fe-a37e-4193-b8b3-2bfb63e9bb96", "value": 77996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448612, "uuid": "dc83b84c-3835-4514-b240-98054b8ce520", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5cfa444-3a86-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776448648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448648, "uuid": "5d079ebf-0c57-4778-9768-f9c4b3a334b4", "comment": "Malware payload (Mirai)", "value": "aa879125d4dbc24282f295277239bee0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448648, "uuid": "de760e89-5017-46ef-b47d-5e895e9836a2", "comment": "Malware payload (Mirai)", "value": "60571e1f388461f7f630e289f78a1f77fb74fd4fbd01064c2b8af8b3aa96c4fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448648, "uuid": "2f4b2666-1b11-4f35-9c82-0dac64759f0c", "value": "T130F2F121206228F8CF9452B156E887C897EC57B5D2F7694503901AD4FF4BE097FECA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448648, "uuid": "0ac53288-6ccd-48d6-a565-8c73a877b861", "value": "768:4B2/VY+TU/BOsX0nn5NGWhnHvwSP/7kys3UozTM:jYiU/Bw1RHvwSP/AvzTM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776448648, "uuid": "6b3d8189-966f-4a07-96dc-aa6ed9bde6d9", "value": 35092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448648, "uuid": "477a4645-9839-4970-8486-ec4bd2fe9f2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a51701b7-3a87-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776448968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448968, "uuid": "3437e3e1-269d-4a66-a16d-867a40f9434c", "comment": "Malware payload", "value": "5e8113968514a231fbc4145acb1e005e", "object_relation": "md5", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448968, "uuid": "8093b772-65ed-4e5d-b6de-6688ba265f0a", "comment": "Malware payload", "value": "1d1e0683d3b54317cb6173827b2c62de634b109fa2eed71b14db2489900c02f1", "object_relation": "sha256", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448968, "uuid": "d07a5690-02bf-4e73-93aa-1e37794a4f8f", "value": "T1A3B733B6ABEF361CC000BB931CF3558B9A3A9DD4ACA4F06A78109C2D758D514D978B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448968, "uuid": "d9b7b020-5924-4e5c-b398-5ce49a9b53e8", "value": "786432:bnWtrRnL6/CPoN4AdikPt+QEQhUIuEbcz6FA47X4jSOFYeXdzd/OG28RxDRrELc5:bnCrRnL6qP+/MkV+Bi496q4jGSOTXNd5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776448968, "uuid": "f49e0ee8-8ce1-4f79-9ef9-a0ad8ac65ee2", "value": 49910933, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448968, "uuid": "572faba8-c9a6-4385-9699-c7e646057b35", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0192ae72-39ba-11f1-bc00-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1776449770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776449770, "uuid": "68219477-909f-4f4a-a911-f695cfde463b", "comment": "Malware payload (SantaStealer)", "value": "f9d36d07fff212667f54ca2c37b65961", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776449770, "uuid": "686452b7-194c-4653-9daa-28ceec93951e", "comment": "Malware payload (SantaStealer)", "value": "3e5d00fd22666970d708c6a0f8813f81689f21eb6e6d3ffbe01e19023562b630", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776449770, "uuid": "47bc3fc5-0442-4de8-a615-8174172466ee", "value": "T1BBF23A487B98C12BDBAF0E7DB5621A50167196621203DFD53ECC64EEFF937048612B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776449770, "uuid": "fbb16bf9-4e94-41f9-a374-f76a5d71009b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776449770, "uuid": "69e74079-e904-4aa1-9c76-b5bdd8585a89", "value": "768:bmQZqx1lYcTYbFyf8qbIKPjnbaoXbYC10koH:b0lYibIKPjRbPoH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776449770, "uuid": "c5b3e2e1-797d-48ef-b511-1b01573a79a4", "value": 36352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776449770, "uuid": "5aa535cc-aee2-46aa-929f-9798a6a4fcbb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88cb96b8-37d1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776451328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451328, "uuid": "1110a3d3-e3b2-455f-908f-26ba74b33ded", "comment": "Malware payload", "value": "379a8f0dbf46fc70e51596bd69b5565e", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451328, "uuid": "ced2c6f8-aa9e-4239-a355-00e05d317539", "comment": "Malware payload", "value": "cda3dcb565cb9096ee148cdaf58e057be7dad6397b18f258079c51c26bfc23cf", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451328, "uuid": "d4cf18b2-3762-4379-8f19-1116a708a0cd", "value": "T132E56DE698A1BF13B3FA4F0863341D5D212423370F8B051AB4BED7C56B86A75346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451328, "uuid": "ee0574c8-7650-4692-b229-7a60f5077abd", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFThCdYgQnYNPdaXj/TB20veknmSt:m0eF4xaDjDONijDG8ZxFTf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451328, "uuid": "efd50cdf-c23f-42f9-b06e-e4d514e25202", "value": 3296810, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451328, "uuid": "9761ede0-21b3-477e-812f-8c9684ec782a", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1957baf-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776451566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451566, "uuid": "b398d264-64a3-4ad0-9905-157b0804058a", "comment": "Malware payload", "value": "08aad486034b02f0575ed2ebd56195d4", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451566, "uuid": "441b9723-8d30-4f0f-b6bb-33096bae7eb5", "comment": "Malware payload", "value": "c7998c0452f26ef7e81d906851bc8816e5bca717ee23db975af373eadf603003", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451566, "uuid": "6717bcb3-af3b-41b7-93d0-627ac0fc0505", "value": "T17D0523E580BD22B9FC4A0ABEBD4CC08B0D6E666B5C7CC24F5658C54AAC57F2075E1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451566, "uuid": "810cdad0-6fdf-44e8-b2dd-b18d85cceb95", "value": "24576:TJlrh5Ek3lX1J0lb1VeSn4+BPXXzH4G6d5RIQ:TzV74y5EXk7dLIQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451566, "uuid": "001eb07b-475a-4e62-a426-13d2fd0574c6", "value": 805701, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451566, "uuid": "9debdb00-a66d-4c0c-bf41-04eb8d9b4a3a", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b55d3470-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776451573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451573, "uuid": "6ba756ed-4df2-4dd2-b850-181923bc5416", "comment": "Malware payload", "value": "71a62ca2716755f239b0ac1cc15292d0", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451573, "uuid": "595181f3-9f3e-48ad-a288-763649711ee3", "comment": "Malware payload", "value": "31ee15d98e19f361880b2e4fe452e4476bb7567a4add084b196b8e1329e68412", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451573, "uuid": "7368eb66-7265-4515-b65a-58baccd4e52f", "value": "T19725D0FA56575E9F8A2A0D64F40C1301ECBCBC9772D880B9AF454EE64DE90488CB4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451573, "uuid": "7aded454-67e1-4b94-a6f8-7e7e1b76b985", "value": "24576:lnNSBaOJVzoobbdZdNoRcm1rSV0HJxrQx3TqaTK6P:lGJVzomlSRc/TK6P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451573, "uuid": "e1bba182-3e1b-4315-873f-d5e3e3a85db0", "value": 1001164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451573, "uuid": "d7b5fd3a-fdc0-43e9-99b3-140751fedde6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff1a3b88-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451696, "uuid": "78da35ba-6213-4546-a82c-af8c51143cef", "comment": "Malware payload (Mirai)", "value": "f075808515ee8fffd27e4bbc34ee17da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451696, "uuid": "22757e74-5450-4997-81fd-90a1b53b26f0", "comment": "Malware payload (Mirai)", "value": "ba29405a88f6c44deb5acc24d9c2d40dbe796138f33278608bbfb520d68e351e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451696, "uuid": "4d21e71f-2aa3-4ea7-b47b-f4ab8fc97c83", "value": "T122A3AF87B1517A7EE4756D7F84139E19AB159FB089830B3EA1FCF9805E3A3803266E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451696, "uuid": "cb4f9610-d4ab-4105-9600-8a6b6cdb44b1", "value": "3072:8KD8kJDihIJBi1d7BmUdHsa28SySlUSVN:8hkJDihV1dtpBpW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451696, "uuid": "f528deb5-d42c-406e-a950-557f57357dd5", "value": 98692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451696, "uuid": "479deb91-302d-465e-b396-16d4bc8698aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff261d2a-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "6546e273-0a3f-4c4b-b0c4-0d27e4701460", "comment": "Malware payload (Mirai)", "value": "46aaddd1598c56b79efb0da070de9a89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "108e2b3e-9dce-42b9-a41e-e81688c82c31", "comment": "Malware payload (Mirai)", "value": "9eb6095d1b258974d8b79cf68ec5e335a785e96851bbfffe57a6387bfbc8768f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "d9aba21a-5530-4dd2-9437-74161926d016", "value": "T1D5D3BF32F0146CE0CD1106B938B6663C0701EEF40AE95646FEBDE56E94B7E147DEDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "a523f8d1-2a5e-4d4d-a4da-32693784f452", "value": "3072:IkZ6AcQdzN1ZwQjRRHPB5nESG9pt5Wi3vGZL:IkFZwahPB5QjzWifcL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451697, "uuid": "f08a9cb8-cc32-467a-910a-df414a5713da", "value": 131616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "a75eb2f0-ea77-46ce-9905-46397c053eed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff28bb5b-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "d66e7395-3c9f-4db0-8bca-5d754e2ef90f", "comment": "Malware payload (Mirai)", "value": "5b59d33d946fa0dd9f1b1170ced4cc85", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "05e7b1e1-0ffe-4e6f-80ac-358cb8f70220", "comment": "Malware payload (Mirai)", "value": "ca533c1f725164973890f67e3c4c607e85f16f85ae360833427e0f1dd7cce22e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "cf386120-fc9a-41e3-979b-d311a0e1882b", "value": "T141047020FA0663B1CC720A3897966E5A6E7B04559FEB26312D1F533DDE628509F30F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "fd0e716b-9cad-439b-94b5-419708ef7aaf", "value": "3072:VcVkb380Xfc43ZwnK14fObW8Z2jdWz1R7UKZ:VBQ00yZ1NW8cjWKw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451697, "uuid": "2d12334d-01e3-43c2-9d11-244889c978e8", "value": 184896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "7437884d-ccaa-4d41-82b0-d10d2e472aae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff2e9998-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "e6f69a22-9707-497a-bac3-f3418a98f7e3", "comment": "Malware payload (Mirai)", "value": "e6547fc57df2ae6e83fe6bae1bfe70f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "1e405ae1-89f5-4af8-b75d-e5270b775925", "comment": "Malware payload (Mirai)", "value": "d05ca7a6ac5b850db3861c81ec166e8153eddb343c793a8811587bcf6690a988", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "b6d1ed4c-4677-4b3e-bd9d-3ffda185cc86", "value": "T15CA34A82E6A2E0F0E68701B01157F3E68934E6345426CED6FFA93D71EC717829D97A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "699e5d51-844e-499a-9507-9d4c80e515a4", "value": "1536:hbcmH9gbivQ5MfsobJRF0yBHicocLcyCs6q/QVImw7G5nMCReZ21Urg:homH9uiI58FzJNvLcC/QVIxCgrg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451697, "uuid": "a19b3b38-c443-4c0d-95a2-9539ceb63da5", "value": 107048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "1604df21-5e19-484a-93a4-b1b389dfddc6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff2eafdc-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "0d675d6c-61d8-4f7f-8b11-26adc1ae7833", "comment": "Malware payload (Mirai)", "value": "d9c56a1ebe9d8bda1f7880c5fbc19b19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "ce0f97d3-2631-47ed-8f42-834fd8c73e94", "comment": "Malware payload (Mirai)", "value": "697bd8428fd397b56f81a9825380e66c720bce8da774a43222ef39062a824f7f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "d03edb78-c313-44ee-9322-b99d7f34936c", "value": "T131E33A07B7118FA1C329967009B3CB67E7A626A616E1D985E76DDD107B2035C2C3FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "4fffbaab-178d-4af4-a71b-715ad038b026", "value": "3072:zxFjKxuZ/mQ7TlMBCQMvTgnIqB7OsUGlj1wxpMEhCYy5hhzjaTfa/k:FFj/mQ76cTeIqUyjepMfD9St", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451697, "uuid": "e1a340e9-9a19-4f4b-8637-5913595d66ec", "value": 149936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "d7b837f5-a6f1-4d4c-a438-2f690779916a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff2f31ef-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "185c6f8f-95b8-4829-8c2a-90c20977139e", "comment": "Malware payload (Mirai)", "value": "274b69fb84356f330c37cc050546d4e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "25112578-282d-4c2b-8aef-5e5e14151714", "comment": "Malware payload (Mirai)", "value": "b24dc73df4149584f1fe09e30c7d5b314c6661a7e81ced2528edcfd0ac8355f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "99a9ec10-3d4e-420f-905c-a603b5c5ec40", "value": "T1F7B3E185FA676491D1A342F9949047C383A12D76CF9213480689FB38387D9FB1FADD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "82a55780-51ff-4fac-ba71-6f6c7f805684", "value": "3072:HB2BdeVRJsnC/Il5jC9SnMKfJyiA9HpNMMTnX:gaUCglCeMKwH3xTnX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451697, "uuid": "0f8515cd-e716-4136-b3ea-c766bb7d48f9", "value": 115444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "9c44f8c9-0a30-44d8-9458-931c725019cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff33b123-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "b90834af-e12c-423d-8f51-73afbdf06b8e", "comment": "Malware payload (Mirai)", "value": "143de8dcbe0baba3a3db44993ed4f391", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "dc37a126-e4ee-4bd4-a7ef-215e5ce3d3c7", "comment": "Malware payload (Mirai)", "value": "bb20403b1b1799c90e4712eca4e654ab67b4e3e083b5bee5d80d3ec81c22f43d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "e302574e-9515-4a6f-81be-67f0f4dfdce1", "value": "T1D0D38D68FA8F79D1D2C7E37EAD4A0FA2712779749555C0B10A00939FD9EAED888C02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "6bd87310-29df-4f20-b06a-f5bc4e16a511", "value": "3072:jFMoTh7M/i0hhgdFSJ013mpj+QyhYNHzPxZ:j7shhgdFkd+3wbD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451697, "uuid": "1447fb54-ad0c-4548-a597-a65898ece6a1", "value": 131872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "840da24e-9f1a-4f24-b61f-163252a7222c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff369c32-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "e3e5faa7-1c1c-4f8c-a36f-46286bc8491e", "comment": "Malware payload (Mirai)", "value": "25e8b4458e73e0ec5c2590f2a9fe9ea4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "983f8d46-7e11-4ac2-9fc1-b4b885d3fbe8", "comment": "Malware payload (Mirai)", "value": "307a230bf053ff9fa149901f5df4c27222c40bfb6c685eb756c5263f578746e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "f4955cdc-a36c-40d2-910e-62e6a9513e0b", "value": "T17AD3C020F0546DC0DC2115BA387997BC0350AEB007EA5686FFFDE96A6477E8439BD7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "8ef4cd76-3c40-4494-b716-ed92c04fefa3", "value": "1536:puiOSlz4Aggt+RTkOwQZkbvkChVDYC86jx2Z++gugeIiEewmHIXAwh0rM:puip4AgTYO9svkWDYC86jxefgMVww86", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451697, "uuid": "c94ab848-4ce5-4248-8a4d-188dcbecc245", "value": 131624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "64ab597a-e99f-41c4-9d92-8acc89deea7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff37f418-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "80dd66db-b4cd-4e8e-b3ba-86670a849e0f", "comment": "Malware payload (Mirai)", "value": "8df7becf61b48e0a948af888ad7cdfe8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "6bb89926-8e20-4bb8-a6a9-1797515a96cb", "comment": "Malware payload (Mirai)", "value": "7ff8dce98fe2c1f35b540c053c29fb9101a1fba4a5c79fffa84ddf600eef8fcf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "3ac8b21d-f286-4c4e-b1ca-de21bfab7980", "value": "T1C3356D2BA2B3B5BCD007C03457DBCBA25931B43526312DBF26C4DB352E65CE06369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "0fe404c9-2169-481e-a3e0-f1c92305d4d2", "value": "24576:VpHdFJNgsy1S3QdFWPt118xzoQyggOLV+q:VpHvJNgsOrWlH8mQtBh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451697, "uuid": "01c6bb58-328f-44e3-8f21-202485e0788c", "value": 1100136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451697, "uuid": "569825e4-0bc2-4f38-a2c6-e2a2155be394", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0059d6ab-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "bfa4065d-3efa-4853-8aae-14a3abf99139", "comment": "Malware payload (Mirai)", "value": "1df405ae065001e74d3fd35f0b7bb086", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "c32fdad3-8703-4297-ac50-b8e18cefe83b", "comment": "Malware payload (Mirai)", "value": "ba1c99a948add11f8d8d0d1ede84139290223b9257f8ad2fd5e40e1e5d7d5ad2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "f7aef42a-a905-4cd8-8ac5-bd35ecb53f3c", "value": "T187145C2BB3C39CEAC91067315C316362771FDB041918EAFFDA0B3794A9977125A246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "24e26307-fd6d-4c2e-a8db-1fe30763c470", "value": "6144:lpdOm515luF6mFO0Xdiybte4ut2Q7IKTt4:5uFxO0X9pePsQ7IV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451699, "uuid": "141e19c6-5344-4766-a58c-29113cb623eb", "value": 197272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "e85708f4-7427-4221-93f8-6748e92f45d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0062544a-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "3c0d3af7-3499-41d9-973d-f8cceb4d8411", "comment": "Malware payload (Mirai)", "value": "0a957b255362c66a09e54652caf91f19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "0fcc6f89-4b42-4fd1-bda7-3286b54cc956", "comment": "Malware payload (Mirai)", "value": "c262a3b0cb485797b3fb461725a49e6a1a65b8e40c51387df74ebe187c3dc6df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "e98bed2f-f343-41d4-95f2-402c34332426", "value": "T1F993E185B114EA1AC02272FC70850A44D3B16DFA4B4B2A0694A2F6B46FBCCD63F07E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "7276367a-3e9c-44d7-84bc-07e18d5e7496", "value": "1536:JQP7Pqnaxwkj7+HenpZKbIMLPChbBxA147e9x758epl9ZLDSwSVPLSQppmpEwgFM:Izn7+Hs4LPCA47sx753RMwSdHmSwuM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451699, "uuid": "775c6938-deed-40df-bc7b-33bed5d2bbf2", "value": 95248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "fbaad64a-ec37-4f9a-95db-32d373e8a62f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0067987a-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776451699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "c63db604-dc53-460a-9612-af94f67b7401", "comment": "Malware payload (Gafgyt)", "value": "1c5f8523aefc5f1c52d19e5f983ac136", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "a5998511-08eb-4c85-9fca-1323987436d3", "comment": "Malware payload (Gafgyt)", "value": "5bfc0335cda0a2eab63d23af4f4fa2e2484f8f9b8d88a2c937f7a900c45b3597", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "00edae26-4dee-4609-8032-f4357d441597", "value": "T1ECE30851A8918653C5D15B7ABBAF539833324B28C3DB33066D29AB382FA770D4F3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "80eabb30-f710-444a-a36e-ca35fa04cd54", "value": "3072:uBtvnSHisuB5WlhMv1gmnOsIEbyPQkOXKwCgDZG:uvfSHfuBMl+v1v7byPpBwCgDQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451699, "uuid": "33719058-983b-41ba-8bd2-a4b8a58a51fa", "value": 156584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "c51fd789-5a4e-4941-94ad-ad30520a23d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0078adff-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "8f79f321-8b62-45c4-a964-6eb41e0e17ce", "comment": "Malware payload (Mirai)", "value": "b874b222b28384e310a2c7e9526b822e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "323b1786-3267-4eb1-9bd3-85293ce513cb", "comment": "Malware payload (Mirai)", "value": "f807a28570e81c290993e9967469f7fc9601448eb14af415842933f179a99671", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "a402152a-7b51-41e1-9a23-75c6f5a638c8", "value": "T17F144912FB0C0463CA935CF48E3F47FAA362199214F99111240D7F5E6A32D77A68BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "d9db5492-dcd7-4395-8f9c-9d24b044ffa4", "value": "3072:blZtt9RqxPnOv5WtIIdyjOxz6GlUIZEki3wUaM:3FA5Q4tR5NrUAElB9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451699, "uuid": "34cba51c-8fcd-44ec-ae5e-97af37103c12", "value": 197220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "0818fc29-e140-4b22-a749-e00a525ab130", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0081b95b-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776451699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "fdaddf3d-675d-4dd0-8654-308251b5aed1", "comment": "Malware payload (Mirai)", "value": "e90a26b9a49f62d8bc03feaa5204e875", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "e1f886e2-aa8b-4a8d-9e5a-80ad36f49b1f", "comment": "Malware payload (Mirai)", "value": "e6724f9377a372cf4900f037807bfe31ca0e142942a71a0d268855ba192b664d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "72ea953a-b862-4b25-b3c0-87746b376c92", "value": "T13FF3392F358192F0F6411B706BCBD3976C690BBF5199909F6B416329B6E0B7BA03C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "9130d98a-97c7-4e33-925d-725ede470141", "value": "3072:lbhovG/AeYe8294Pqmpdb0hBKuy6MZO9NHSLr1HN/EIOZh55Q9UX/:dO83uuhW8bHa5t/CZh5KOP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451699, "uuid": "1e11e215-fe89-4242-9d33-9301e7f14478", "value": 164384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451699, "uuid": "31c5cf3a-801a-4522-b2cd-e5adda51eed2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "680d8443-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776451873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451873, "uuid": "9cec42ef-54b7-4962-ad52-07408f30677a", "comment": "Malware payload", "value": "49b9eaaf28e144f17da5e065bded09ac", "object_relation": "md5", "Tag": [ { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451873, "uuid": "a1e9fd99-50ec-44ea-b852-1910a389d75a", "comment": "Malware payload", "value": "d0e130dcab2cca6f0204aa2d7273737a06b1c9b3b6957d32521f59a629efa914", "object_relation": "sha256", "Tag": [ { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451873, "uuid": "9aae1e36-94da-4c33-89f3-bb1bd852c099", "value": "T183C633AE6ECB44DADAC114B05723ABE333F7AC914AC68C357AC13525B0B0FB6306E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451873, "uuid": "c96ceb85-7dc3-4285-8706-b8c1bc6c797b", "value": "196608:Pt8jzMVCyHTH5mcoBiFPU15uJIpawHEJbNzOPeWfCzFYRAB308L1+B30:PtwQRzZJoBiFPUiJIpuJbNzCaB518", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451873, "uuid": "e59dfd2d-a3e9-4514-99e3-72e35633fe83", "value": 11657216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451873, "uuid": "69e262e0-c894-4eeb-b869-a037162e954f", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac408abf-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776451987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451987, "uuid": "63c7918c-c62b-4063-af66-23927dfaca93", "comment": "Malware payload", "value": "72020ee66dec4e05fc82cb9edfb24835", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451987, "uuid": "57bf9a41-3de7-41fe-9e8b-b12851742bd5", "comment": "Malware payload", "value": "ca3994522e4a81fa3353149bd80864bd04b1558daae90ae13c318e63a9421719", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451987, "uuid": "fc41e2d9-610b-4e65-a255-9051aa5056db", "value": "T15A44CFCB6432F82BF3D3B40B22B86278B1B5D745327ADD9594BA1744D9EC0232F192", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451987, "uuid": "557624ee-3a06-45e5-931e-ffe7b8b555f1", "value": "384:Tffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff6:FUaoFl+K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451987, "uuid": "c7ac7b64-dd9b-49c6-bb14-fbbb605ae120", "value": 273094, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451987, "uuid": "b40ba8a3-fa4f-4743-aafa-fa61255bbad3", "value": "application/csv", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acae503a-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776451988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451988, "uuid": "e35853ea-388d-4b1f-a667-810984f643b1", "comment": "Malware payload", "value": "de1251f3590d0dd9269a8390ecd98a09", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451988, "uuid": "f6ec7031-76f9-4cc8-bbe6-06019470a46f", "comment": "Malware payload", "value": "6e949366dcec56163099e5529f4fc730912f9132e16d1ba232ebe7900eb3334f", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451988, "uuid": "d21b3fd5-ed57-477b-ae3c-df901666fc70", "value": "T174D56BA688B1BF13B7BA8E4873341E5D101426370FCB150AB4BEE7C67683975346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451988, "uuid": "625cc239-db56-4b2a-899f-e0c2a2f91cc2", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTRaMFRBW84FMotA:m0eF4xaDjDONijDG8ZxFTD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776451988, "uuid": "ec67694b-0155-4398-93a2-1d60e6ab9f14", "value": 3000812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451988, "uuid": "db8234d6-f904-435a-ac9b-b04c06bff3b7", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c57f3a2f-3a90-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776452888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452888, "uuid": "d83895bf-6446-4ba2-b540-593ef4f14ba7", "comment": "Malware payload", "value": "aa81ec9a08aa03e366eb1ea867dc848b", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452888, "uuid": "f6e4d67e-faf5-497d-afe8-9f5ec1267506", "comment": "Malware payload", "value": "cff4e453e86b311f287432cf4007d33a585a731b82d83c1b679c9ef6ee3ab23e", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776452888, "uuid": "631cf94f-6669-499f-8aeb-2d7d96d2d61d", "value": "T124E56DE698A1BF13B3FA4F0863341D5D212423370F8B051AB4BED7C56B86A75346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776452888, "uuid": "58493b16-29e9-462f-a908-7ba3d67c63be", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFThcdYgQnYNPdaXj/TB20ve7nmSt:m0eF4xaDjDONijDG8ZxFT4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776452888, "uuid": "00a7e759-9332-4209-bcdb-416b89d3e3b9", "value": 3296802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776452888, "uuid": "22c172bd-d985-4734-989a-c0b2b82514b3", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "187660ec-3a91-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776453028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453028, "uuid": "e9796236-5a86-4a36-8020-7a6ce905791a", "comment": "Malware payload", "value": "ee31d00a9f1d10aed7043c2e30ad6e57", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453028, "uuid": "c6b93981-19a6-49fc-a47a-78a2fe531c3e", "comment": "Malware payload", "value": "3fe3ec74e9684db101d1818724f0507f1db50ac110a742aa46b5f3f6f0f5e88d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453028, "uuid": "402f0993-3427-4a95-886c-d25c9b5b7fd2", "value": "T176747C36530BBDDA0B7A1D40E81028218C5CA8E7D77145FCFA893ADD65E6640DF6CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453028, "uuid": "30bd9e0f-7ccc-490e-94c9-cf8bec72f9aa", "value": "6144:chnXaoweCTopKz3KuzSdsa1zqiE8S5tLBVxiWROl+qBryFQfhuIQK1PJoIOlgh4m:sKXejKVzMCSgPfTylTJEWpzki", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776453028, "uuid": "7fe2238e-9e52-484e-86e0-a639c4dc2b30", "value": 354938, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453028, "uuid": "b2f8e4a6-a067-4757-98f2-b0bb74eff11a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5004a668-3a92-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776453550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453550, "uuid": "41a32627-f09d-4921-90fa-936754e58ab8", "comment": "Malware payload", "value": "71fd6c789493ff729e4e632c8fdf6865", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453550, "uuid": "e3ace908-36c9-4cd8-9395-50b72ab00e7d", "comment": "Malware payload", "value": "239bb4be497a40a7871eee027b711faa5c7ac333ea87f548fa4d1f0487c80a7a", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453550, "uuid": "6ce3dd05-ae4e-4474-97b3-88d6e453a9e3", "value": "T18744134DBBB6597C958172CECC4CC5F022DD926CA35442C08A392772E95E73E8E3EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453550, "uuid": "cd9f4eb2-8ae8-4466-b959-5aa8284b7c12", "value": "6144:AKZ9if2+kitGascjYYX0BoNOzWTm5y3IkZMmW2vOuzBQoPgJt:A89iN7zsBYXp1ajGMB+OuFQom", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776453550, "uuid": "a70f1bf3-b816-405b-8528-f06c3b760bb7", "value": 276032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453550, "uuid": "574609f4-c49e-40f2-9382-f736919e146c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "746fc729-3a92-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776453611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453611, "uuid": "d8926658-ba5c-4a90-9cc6-148d5faed60f", "comment": "Malware payload", "value": "ec0fac0dd73455b5a3766db9c316b5b4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453611, "uuid": "ec9ecd3f-96ae-495f-9563-e4a5d34b621c", "comment": "Malware payload", "value": "8abd9fded18d37d0e3594433068c2319a23c49c82498ec07160a7f8bbf135b81", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453611, "uuid": "ac72f066-f142-4ed5-8644-97eddff99672", "value": "T1C37408FA12236D8FCE260E40D04D0217DC34B87F71E855A8FE4496B058EA658EDF59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453611, "uuid": "8cd6fa36-9014-40f8-8739-fe85688aecf8", "value": "6144:J+kHMTvyygBRaft+fFHfQFMDzpleJYdAqLSsEN4364+fG9/tc:9HMKzSnj4pw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776453611, "uuid": "67f69c40-d0ac-456f-a9eb-7dee7814fd0d", "value": 363870, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453611, "uuid": "0ab2af80-8fb6-48bc-9e01-d5a1f6a74cf5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a839819-3a93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776453970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453970, "uuid": "e39f8034-7c65-4f86-9703-56b16fb7c90e", "comment": "Malware payload", "value": "7f14f82d371a779c5138984c367a4e83", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453970, "uuid": "13aae73d-5e5f-41e5-9ceb-c288f2e0a38e", "comment": "Malware payload", "value": "9697095125c55981e735a474bd3bb1517ee2915ad1bb583de5703d8b524a0342", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453970, "uuid": "07ab963a-0c88-462a-bb5b-279ad02acc2b", "value": "T11D4412A41EAEB194F033178B81166A3D2DA0E1797731603910B63D7D62EFCF19163E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453970, "uuid": "48b131ee-5557-4d3a-8fd4-0364f60dd7b4", "value": "6144:3p4vkQxadAMu9Wd2gB7LOwpkyfH7GtekiO41KSZ7Sa:qvknuWEM5Vv8ekL1SEa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776453970, "uuid": "aa94d2ad-5833-435d-813e-fef5dc8e20b3", "value": 278080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453970, "uuid": "105030d7-b2a6-480f-9515-226ba22c629a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d161e19-3a93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776453975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453975, "uuid": "34c98462-b4bc-471b-9fbc-7df80606d033", "comment": "Malware payload", "value": "b88819a8c5213b2972a432c9b8b0561a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453975, "uuid": "944e2ea5-323c-443c-8492-af8806122ce9", "comment": "Malware payload", "value": "135eb42586d792981f9894cb2eb316d0d6c565ad0435cbc813bd950216f2373f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453975, "uuid": "6f0774aa-14ae-437d-9146-c3bff10b892c", "value": "T143746971EA98AC3E70761E6163EB0B1C1F4C9803F97AB8B963C49F514DC0B42AD5B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453975, "uuid": "ded70873-6e26-4949-96a5-d38095693c12", "value": "6144:CYtRcd2Fa3lGVSjUgTc07TfR+3cNTTDXu1GGWRCVjR:CYtRI2FOGC94YfgMNL3u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776453975, "uuid": "b579e918-660c-4aa4-ac03-bed5b4816047", "value": 338844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453975, "uuid": "491d0bce-c9f3-4281-ac8f-670821a92639", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc4030cb-3a93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776454269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454269, "uuid": "65f943e4-8302-481a-b00f-cef852a6fa28", "comment": "Malware payload", "value": "0249f299222d1381c35b68bdf0608956", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454269, "uuid": "8e066bea-b590-4738-bacd-e4e4ac71f5a7", "comment": "Malware payload", "value": "4907741919223d3d4dd9118ade8b2895ac0088b92d45f187238fc74e68ab7064", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454269, "uuid": "0d493dc6-86a3-4e4b-9b71-723c38bcf132", "value": "T10BD307731257BEDB8F770E45D0482590ECA8747FBB2082ACBF4119D682E6558CEE9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454269, "uuid": "e627e5e3-d504-4797-8ae8-02e8674ca2b2", "value": "1536:YsIF8n6kvTPYwpPSCZTqLFFpNh33Vo61sRHuhCcKwG2EVlcL6eUkXD9Ayv4TC+xE:YhF94TAWSCIRZ3C5rR0/gTNe5apc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776454269, "uuid": "fa77cf61-01dd-4673-9a45-a48a1612a01f", "value": 141318, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454269, "uuid": "82a4629d-3ea4-444c-a1b6-3a3381780861", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dfbf94c-3a94-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776454513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454513, "uuid": "9c618edb-2f59-49bc-a989-9dd7bf1ec00d", "comment": "Malware payload", "value": "123f6c8c9c44499680b9bddb6ae738e7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454513, "uuid": "80e3ce28-52ff-4817-980a-8ea0f0055840", "comment": "Malware payload", "value": "f4dbfa0cd5515d9f6871990f58140ba8cbd4d72dde287549faca01cf922b6e98", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454513, "uuid": "e9c2d873-ea90-41dc-a2cf-8a813c4b9731", "value": "T15C25D0FA56575E9F8A2A0D65F40C1301DCBCBC9772D880B9AF454EE64DE90488CB4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454513, "uuid": "3c592f20-2277-4a30-9da9-959083167d42", "value": "24576:PnNbBaOJVz2obbdZdNoRcm1rSV0Hy9yJFB/SnTK6R:PLJVz2mlSRctTK6R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776454513, "uuid": "9b70222d-b4e9-4485-8808-114c69437afc", "value": 1001166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454513, "uuid": "2c27fc58-d410-4d24-9012-2c3e1d32ba37", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c5d3df7-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "a85f3499-f7e6-49ff-aed5-7a9d4a18da83", "comment": "Malware payload (Mirai)", "value": "4603992aaf80a3923fed0bfe604ef82d", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "ce8fa997-217a-49b9-96b0-b5640e1cb247", "comment": "Malware payload (Mirai)", "value": "5644e4bcf30233be39e0fdaa4916b9f4023fa9790e47d9b47d6aa335c63e91b7", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "79753841-5551-4256-aad7-f5ce891c6edf", "value": "T1D6B2B50768A2CA9DD68A3134B752AA18730167E4D3E77F034818E7B8BB4755C0F79D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "2c05666c-d7b5-4c4a-9c6b-be62d26acfab", "value": "768:61Q51xFYgow4A5BJRZhpx5BJRZhpx5BJRZhpx5BJRZhpxmO2eGuW+mOBcq4p/AYj:61YFYgow4A5BJRZhpx5BJRZhpx5BJRZO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "47e2b8d6-ef31-40e5-854f-51eea938846e", "value": 24580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "51e26216-eec4-4691-be5e-59db2cd6b2cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c64de43-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "d4881165-cb5d-423a-9d43-9785a369633f", "comment": "Malware payload (Mirai)", "value": "a32bfb358b1fce453413cd8a05e30c60", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "a0332741-f7a3-4cc8-855c-2f1d71cd0eea", "comment": "Malware payload (Mirai)", "value": "01ee3e31bdafaf0713b4fb28414750a7ba95c98ca11955dc27f9ff28d6619879", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "03a12d70-b747-487f-a885-e4ec43388515", "value": "T176534B3679B95C17C4C8A67926E34334B6FE4B4534F4C92E7D224EACBB0066026637", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "0bf3771f-50e0-4634-8dd1-9a4b31c4e335", "value": "768:j8jTPDfOoFvk55hMn/k21AadVLS9ralO+l+m5EHb7:YXFia/k21DBWSl+uS7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "b2ff0e5e-e861-4f0f-b269-1a91a1d63681", "value": 66672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "0d4cc6d2-e7dc-4001-a81c-a220d84adfd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c6f3ef2-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "dc4a611b-d0c1-41b9-add0-c49d97207fa4", "comment": "Malware payload (Mirai)", "value": "5c1dcce1d1684344bc77480bab2678b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "f1f7bc1f-bf78-4703-908e-5c4c8e5bda04", "comment": "Malware payload (Mirai)", "value": "08d40399a4b63d01fb7aafbd7ff58021e5437a93c8695071e873a23ba4cb8e9a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "96513b63-a950-4190-989a-e20502f9ed3f", "value": "T10883A44E2E728F7EF72EC33647775E30875423AA2AD0CA45D16DF4065E2020E695FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "27fa2a2b-9226-45dd-9606-e795dd1a2554", "value": "1536:8mIv0xZeHYauqcBHCCRp0U0tp/spNU1XIfkI9bHvWcp8VBvP1:8mBdpNU1XIfk4PWcpSb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "85685a3d-6646-4343-a035-ef7b8e181c0a", "value": 84308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "5d80f43d-9f61-479d-a74a-628ba1dfd106", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c6fac0e-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "bce90757-6c31-4911-ba03-41384425e131", "comment": "Malware payload (Mirai)", "value": "291b3b44ad99ea54ddf82fe5eeeb01d5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "83db4fee-33c0-4352-af76-4c60b74e8946", "comment": "Malware payload (Mirai)", "value": "004bf042c3d38a01d4315997586b410966e1d7d886a38e2d4ddb2af874057ed6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "0deeb51f-9aec-493f-a333-2c8ed313e119", "value": "T15043D882FD0789F7D8835CF05497F33F9731E9140234A169EF9AAA7DEA3364656222", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "cd21b597-0c2e-412f-84fb-2edaf14e5bfc", "value": "1536:17UAHV6OfLGiwBzHhA4thghmUhPRANT/lq3T:1p8ZfmiNT/8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "5ad71c72-70dd-4926-97b9-ac473d3083c9", "value": 58288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "c4619931-9bfb-4c9b-b184-eb8350a38321", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c70b605-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "9493778e-0475-4c98-850f-d98a587b7945", "comment": "Malware payload", "value": "80a3a3b6220e85cbfa6f7334ab692848", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "833247af-8e2b-4b29-843d-33efe76e773a", "comment": "Malware payload", "value": "30bb4b105e1335105f323bd1f7bae848e26691d39fe3627a11526bf2030335ef", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "0ed6c01c-74a6-4281-bc36-876b58f668cb", "value": "T18131B4D971A30AF13DA1ED7372B944D4B388E1F6B1C4AF54BCDC39E9208DE242058A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "c42958bb-c63c-4d6c-922b-1b131ef54d9c", "value": "48:HehKMph01chVMOhfIehqtEhF/hrlhocjhpdhJRhtaN:HeZpfb6e823rNJ9+N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "c64fd011-d933-4a72-b513-5afea97c8088", "value": 1623, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "2d415b2b-10e2-4b72-8a20-c8cb1c4b9bae", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c74add2-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "dfcccf10-01b1-4c3c-9178-036033524b07", "comment": "Malware payload (Gafgyt)", "value": "df6fdacba2c69caa140148187187e9fe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "e11df38a-05e8-44db-81ad-a26cfc325ddb", "comment": "Malware payload (Gafgyt)", "value": "9db4ea5016957840aca7e15c449731c04aa221d92f59138beb4c758ba9662695", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "6c32d1c5-dbfe-4171-bb79-5f936f37a1f7", "value": "T19583C4197F714EF7E8ABCC3745B84302309D5A1A22993BB9B874D518FB4B58F06E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "23942bde-ab2f-42f6-9e3a-eef9ba42651f", "value": "1536:fdtvzTXkwImWaT2byfjlbpmFoOp7n1CiJiZS3Nvv:fTRnTuWbpmNEiM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "58bb6271-05ba-4600-ac44-c77361e693b7", "value": 84308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "21ddce5f-a18e-4607-aadd-b1271f620dd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c78623f-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "e52162a6-0fb6-4196-adc6-cb1736909ff7", "comment": "Malware payload (Mirai)", "value": "8dddc0804fe3c2203320641ed9fa5641", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "8ab22782-d08c-4ae6-84a6-ec19066208e5", "comment": "Malware payload (Mirai)", "value": "1b59fae7d89a001171b836489a09481621827cfb400a8551e91f11b50ff6f083", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "f5c2e389-c34a-4afe-873e-8aa84c4027e9", "value": "T1FD334A45E643D8F0CC0114B028BBE732BA71F8351074F957DBE9AE7AEC66A11E9067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "cf6d30bb-c19d-416b-bdbf-fcabb5112fc3", "value": "1536:CRsWYHzbEKGDhihchwjhF4bRquW6RGsIliggg:CRFYHvE/swbRpnPIliggg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "4a79e82b-b83d-492d-ab14-ab7809e0f6af", "value": 54192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "86bb9e62-683d-46b8-892d-8326971058eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c7acadb-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "fc438140-2a10-4418-8960-01422d405440", "comment": "Malware payload (Mirai)", "value": "ee39032f7c69f2e55bb274cdcebbc9fa", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "b725802e-43f4-462e-a410-cbd429203186", "comment": "Malware payload (Mirai)", "value": "be5462a5aa74fe854dee72d4260d89084a9718a777492ce625ecedfd0863e244", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "242c4a8d-6137-462e-9499-de13781f0e5e", "value": "T127D31B47FB41CB53C4D22779BADB9249332397A5D3DB330649189BF83F8269A0E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "298b182d-fd93-4fc0-8aad-130294edb880", "value": "3072:W02TDWxMQIwxBLf2is9juX9CE3o+mM/95FB:W02TDWx+6BLf2i+CXR3oPM/9TB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "c43f04a3-d4df-4248-9092-b35df12b3a1c", "value": 135370, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "6db7283d-36e1-4737-a355-5e819ac6cc18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c7b8df6-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "98903b88-223e-4469-88e7-951e99ce9d92", "comment": "Malware payload", "value": "e7bc300e32fb778506528c21608b58ae", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "7ee1df25-c4d2-48d9-9f78-a0f8c1004af4", "comment": "Malware payload", "value": "7324e09fe7f30ad3810aa5f230efbd65cf9205d97e00a3a892b2f65c1844f68e", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "81d21c35-7d8e-47d6-90e8-940bd8e2b12d", "value": "T174E37C8BF71A5C92C8900BFA4BD74B8C6BA3A1404F67C7D73D0C66341E666DE9D1A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "e1184e30-f677-472d-b865-86a3eee0a4c8", "value": "3072:eef6QcL1ItXaHD4TSwwg6qjr9hVBnm7WG:ebQJas+Nq1TBnm7WG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "0a9333a9-5102-4132-a6cb-7d5c66b3454c", "value": 143636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "dd3beace-d7dd-4d9d-ab63-21d0356175c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c7dcd98-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "0e5ea187-599a-4f04-8931-ae67c6acd1e0", "comment": "Malware payload", "value": "cd6f56c5fd3ef23c45fb5fd9b5217916", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "5f7158d5-561b-4bc6-b99d-f1a3b22bbf5e", "comment": "Malware payload", "value": "49d0c1f61a118ddb2363c29013b1076f62bd8dfaa34779afe25a404dde328679", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "35f23b0d-d870-4742-8cb7-9badd70092d7", "value": "T172339DD2C8BABE4CD51462B0603ACBB88383E500D9835EBA661BC6744847DCCB25F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "7808a60e-d936-4eba-be40-061c33c52e48", "value": "768:AUFsvA5NrJUsXkSnMSA63tZCNgVw23J4D9hGGijPovWGwRVCzS7:8UUsXkAMSj3tZCNEiD9c1g+TVCzc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "3d2db517-8dca-4eba-b721-e09f9fac87d6", "value": 51640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "730a3a40-374d-45a2-bbd6-105985d0ac1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c7fe8ea-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "90679a0c-4e39-482d-9f04-9540b12dbca7", "comment": "Malware payload (Mirai)", "value": "ea4cb0c8ae0e9c4f91da31ffe1d6b74c", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "5e9cbeda-17f9-4afb-ac21-68c69f27b568", "comment": "Malware payload (Mirai)", "value": "0787632c5a42a02fe797e2e593063fa6125ea7b531df90014b2948447776cd8c", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "127cc930-9566-4742-90e8-54c3726b22c6", "value": "T1B3433C16B892CA56D6C572B97B1F929D331513E8D2EF3303CC096BB47B8781A0E7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "d5fbee37-1f53-4590-a434-a32b3a971c29", "value": "1536:HZmpxA0PwKNKyLdZU/tAeAEieZCEnnesLxH+:HZmpxA0PtdZU/DdieZfHL5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "915e63d3-147e-4ba0-953d-42159b660329", "value": 58472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "ab7d5ac5-bafc-46e8-b5ad-8f6f547318f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c82e5cd-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776455235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "c5913ad5-eebe-4e3a-b4f9-b1b85d52ce58", "comment": "Malware payload", "value": "7d2f1c3ac11cc77dc745ac172f4a5480", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455235, "uuid": "337cc420-7f88-44ab-b1c4-96cc82c7312a", "comment": "Malware payload", "value": "fd6c043a426459f61c6b8edee41c26b79a912708f187c9ea21f66af0fcb09039", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "83a418a3-b596-463d-8b10-dee8ddbaf6d6", "value": "T19BD33B07FB41CF53D4D227B9BA9B9249333397A5D3D7330649189BF83F8269A0E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "e47fabed-fe7b-4b41-a77c-34cc2bd6e1fa", "value": "1536:pgneJa0WJwFG3tb+ELznWFdIaCgyLlavLWdlLTiWc2XYQRMAM3qcWksMzw/9ZVem:NJa0FgxVgdIaCgyLEEncMxO39WkM/9H3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455235, "uuid": "162a173e-42c2-48ae-82d6-8c7013b2d82d", "value": 136835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455235, "uuid": "74c050a7-81c8-4ac7-be78-8798dea90635", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c76ab91-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776455291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "7406434a-64e0-4fea-9435-97f7df95462e", "comment": "Malware payload (Mirai)", "value": "0d8f760d4c517a0a1eeeb0b3fc5e0f45", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "d8bac233-8372-470b-b27b-5e30193889b5", "comment": "Malware payload (Mirai)", "value": "20476fb889d296e9bdd3de1a9407a0b4294afcd0bc93974e5d2044447cd260fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "ef2bae74-0050-435f-a267-8ba5c9a08031", "value": "T11643F641FD0789F6D88798F05AA7F3BFA730D9140134B26DFF89DA76DA2364642262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "ce935431-c924-49cc-81db-aa134d97a45b", "value": "1536:2Jvja+dSkoSA6srgHFpDh5YsPhChTUhqgOv/qNa/H:SpxdqEOv/qE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455291, "uuid": "8a25374f-b1ef-4550-9c64-91fca1b88faa", "value": 58288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "b23c21e6-4ef6-481f-ab62-74db6e6cdfaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c888825-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776455291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "1e57f86b-9395-4443-94d7-88a5ed983dfe", "comment": "Malware payload", "value": "5a6ae35aa311faf95748bfcfa0957272", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "d5101435-ccf1-46c7-ac0a-0d7c088f5357", "comment": "Malware payload", "value": "91e51a6c7d073613cf6238618c7d06851429f8b57eae456c1b5a35dd5c82df9c", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "1840b469-d22d-41cc-aae4-30088a68112d", "value": "T13AE37B97B71A6CA3C8910BFA4BD7079C6B6361408F67C7D33D0C66341E6A6DE9D0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "60430176-97f7-4e75-afbc-8df251477d5b", "value": "3072:P2ZzLN2L1Y2OQQP3y84g5UqnrMWim7WG:P8LGOnC5qgWim7WG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455291, "uuid": "7530bd4b-1cba-4994-823e-d297a7d7a5d1", "value": 143780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "53948380-dbf3-4b0b-a735-b1e2815a2cc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dc35cc1-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776455291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "549f351a-f3cf-46d1-a9f1-92af1ec7bf88", "comment": "Malware payload", "value": "c5e5a4d1c16fc0cd8228af4850c150ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "1a6e43df-ff12-4c01-83a9-e3ea760c8fd5", "comment": "Malware payload", "value": "937d1f386667ee94ded5735cddc74c5cb33b8f4eab0b489b580ffd21e59444e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "161598f9-f0b4-4887-aef5-391979d39b99", "value": "T1A1335A85E693E9F1DC4119B01B37E372AA32E8751034F677D7A9E77ADC22611C9123", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "a7467ef2-e3e7-4824-b8bd-5e1567106255", "value": "768:YtpxlQTTW454Xe9rKQrhtbFhQFhMTBah+r4CyoII41b26YswO:YTxcTYXe95rht5hEhMTkhzCP94J26Yg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455291, "uuid": "17f17df8-c7e4-4ab2-88b4-6111de92b165", "value": 54192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "c9572834-344a-4233-8402-f93f3e29632a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dcffbbe-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776455291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "ece42a30-e985-46bd-9f1d-97ed914abcff", "comment": "Malware payload", "value": "6a8e01a807e9cafdf19115bfe560a472", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "7ef4b930-9c7d-4703-a467-15d709b20f97", "comment": "Malware payload", "value": "74218981370e6f45d0bf9c15468cd50533394783cac6cb680181202df8184d82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "c16b1ee2-e397-4883-801d-fb40a80f2c35", "value": "T143536C3379795D27C5C8A67D26E74334B6FE474534F8C92E7C220EA8BB0066027636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "23e12ba0-9118-4b65-99fe-b1d3fab59e99", "value": "768:w5lwazSPpS0zZnkpC9q16KoIGwnrCu9rZ3O+l+u7AGbM:tbTY16KoSr5Zl+uFM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455291, "uuid": "3dfd9fb5-6729-475e-af15-870c2d87e443", "value": 66672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "4378dc50-f844-4c93-bf0e-6ac2020c656c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dd9facc-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776455291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5a07659f-df06-47f6-9253-836d537d3a72", "comment": "Malware payload", "value": "e5952b2445f079f2d4b871925fb2af63", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "76941227-26c5-4590-8e44-0eb51f3586df", "comment": "Malware payload", "value": "84e02800167a3202d85cfa3100ddf7f7283b76b2f4f045ff912ca2a1148e032c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "36680be7-4ddd-47f7-b9d0-14f8a8fa491b", "value": "T18283C6197F714EF7D8AFCC3756B84702309D6A0622993BB97874D518F74A88F06E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "5bae1ef4-bc05-473a-980e-eb4a95598cce", "value": "1536:nAX0JCHVyFgaGRlbpmF6TbYTkqzDZayufO7h:n1mEobpm7zDj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455291, "uuid": "1119ce01-057a-4849-9999-e2792a4c0a67", "value": 80936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455291, "uuid": "5a5b0039-ae49-4b04-915a-e940a5840ebe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ebbf863-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776455347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455347, "uuid": "07fc5f19-6d05-4966-a33d-41a69d75ace4", "comment": "Malware payload", "value": "be627eb28a5f3f04614941023c6d5658", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455347, "uuid": "1103094d-64ec-4692-87b3-d57b89f8d38b", "comment": "Malware payload", "value": "ca2946a197b70fa301c9fe315e1deb6b16c4f8da0687f232f286d4af234747d9", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455347, "uuid": "b2ee097a-9843-4789-bafc-affa1c9e84ca", "value": "T1025533B0CC5BCCA961F7A58F86D5653D04CDE22233A16880D4A9EDF7498F69E4C233", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455347, "uuid": "adbaedb1-8856-458f-b5bb-cf5d26d3600d", "value": "24576:tXqElKvdLOyOO5kXI/2AhxNUF02T/EcOfWCN/DRarnwZ3/7I1xk5YHUBpRJuQFfy:tX/c+0vHPs/EcsWC7/ETk5hYQBp901", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455347, "uuid": "bb4d226f-8595-46bb-aeb5-5ebdad955420", "value": 1360231, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455347, "uuid": "d04870e6-0653-4bc2-b39a-8da82e9bb77a", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a36ba2cc-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776455408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455408, "uuid": "3293e642-8803-4fca-87f7-3294894bd03d", "comment": "Malware payload", "value": "55bb211cc95d09757f1eaea6ddf7452c", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455408, "uuid": "8e39852b-81c1-4352-9a76-99a8ccc0c231", "comment": "Malware payload", "value": "19b725680d1559d21a75dacdd2d510333f5465d81d82401312f4a73a0f7a76fb", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455408, "uuid": "444df3dc-7408-45b8-a42f-5e20f5c6884c", "value": "T1FA753351C0C96870D9CD78C875E139A17DA1EB9E33FB9FCE0A47ACA9478842F40876", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455408, "uuid": "f60838c7-579e-42b3-81ef-2b0171cfebbd", "value": "24576:36uzwcon/26qLEP7J+0fefZk+yKIswG6WODtXRVV80chy973Gi1zamTWaZfcO8gw:dzonuQV+WefZv7PODNVp3BznWaKgmAM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455408, "uuid": "97a4290d-3ce9-4612-a82f-2950af8ff101", "value": 1664627, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455408, "uuid": "418209da-caaf-4105-8b9c-02822df94264", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0df2eabf-3a97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776455587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455587, "uuid": "e7010938-626f-44a8-81c2-c20e36fb2119", "comment": "Malware payload", "value": "f7dcfe37419712fb433e2c2aa5b64cb1", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455587, "uuid": "5b23f20f-3396-474f-b391-db7186a64b2d", "comment": "Malware payload", "value": "4688668577ce32214649af184555dd547b8f0409151bc0d24647ff963f7b81ac", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455587, "uuid": "462769d3-cb0e-4a55-ba16-2724c94cc9b0", "value": "T1ECE42303B2EE7DF1E6C790D96D986DF650374601717F9303BF1A56E2206AC098D287", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455587, "uuid": "d8827701-a3d4-4489-af4c-c900bdba3cb0", "value": "12288:XWv+u1NxjyHcJn569UISP1MtwCh0ZXZ5Y1acBCBLFMPasfurtObxC4ebqiDc+Gb0:vwNxuHcJn5YDGXTyBC7E7fuxObI5qiDX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776455587, "uuid": "e5676a5e-f561-4bbd-b02c-5f39ab368993", "value": 682447, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455587, "uuid": "6357a2c4-d68d-433f-ba8b-f06867cddcd0", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be00d470-3a98-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776456312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776456312, "uuid": "79711e8e-9bdd-4f5f-881b-31cd40b239a2", "comment": "Malware payload (Mirai)", "value": "9da88eef9ea35b09d2e11a72e32adaf3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776456312, "uuid": "d9c4986e-9d7e-43b6-a252-a86c01c111bf", "comment": "Malware payload (Mirai)", "value": "b0a12cc3b6f878647c01ee35a7ddfbcd58878c83e7e04fdf92bba3cffc663593", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776456312, "uuid": "22b48f10-972e-445e-8f2e-a5106de1556c", "value": "T10CC3D74B6F128F6EF26986704BF34A31D65876D727F18681E16CE9401F242CE642FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776456312, "uuid": "85b625d2-f2d1-4c41-88db-11be0318dcd8", "value": "1536:jsyvmr1z0FJ8pYcoJx6j5gvpHAIJ4xtypbSDUM1bOQ7s2PrRbetaamBeOtYGe7aw:g0m+gwDJqt0SDd6+eDgeyAa2zF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776456312, "uuid": "0d6fb874-d92c-462b-b3d2-127468d19a57", "value": 129624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776456312, "uuid": "da7e936f-8ca9-4b92-94b0-08f0bb73020b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0a7c880-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "af0d72b2-1213-47a7-b85a-87ea4e4c1362", "comment": "Malware payload", "value": "d754a7994ced72cb7fcfb6c21d911a4c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "05f4ff42-ae75-4b84-aff1-dfb39224a0d1", "comment": "Malware payload", "value": "53c14b83206d1c83ae672d10314ede3aaf74386d065364aed714bf0d729171e0", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "fb111775-512f-47f6-b697-2c0d8d2716ba", "value": "T1627192852391CB3AAEFAD953717493443190A28654EF6FACEEFC3890D4DCE48B4447", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "c865b6be-a4de-42ad-922c-607a721d95c3", "value": "48:JwyY8CVl+V6TGgscv6p3iXFiFvCF8Fq2FVsUgFV3j3lVklchGl8X0QMw46YD:urqawvQmqUVXaV3DlVk+0x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "669bf20b-56a3-4ba6-bfb5-6b3c1bc0236f", "value": 3734, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "b13f56d9-f1a0-458b-af4c-cac9b65b243e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0a7def8-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "e7b877d1-9287-40ad-9348-f3aeb01371fc", "comment": "Malware payload (Mirai)", "value": "16ab1fa2a6200963e0d198b61140ed22", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "393b68c5-1ecf-40d0-a394-1882fa8be331", "comment": "Malware payload (Mirai)", "value": "c74035e16ff5fdc3b373d7bc6fb0731c5f8e52de625433251fe3481ccd585876", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "abec5848-a957-4453-b8da-3323ed8a95a4", "value": "T11B932AC6F683DBF6D84314B206F7F7329931FC3A4465D9C2EB643CA2D9129E166122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "40010cec-570b-4a5b-8292-6c3b8229d65b", "value": "1536:7EzkoU2h0IEvmIrdwZWyQOo+5gUdxcSqy2IJuUhGUWYLagd7L9brhg:7Ew32aZwUyQ9+5gMxPuUBjLlDO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "34721a59-1488-4914-97c6-e91edcf3f1d1", "value": 95016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "6e0fc198-a80d-457d-a30f-6382057df872", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0a88cb7-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "5ab6d97a-d3be-44cf-bc2a-08a0a71bc0cd", "comment": "Malware payload (Mirai)", "value": "532d0cbb94edfec21fc2373e18d177cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "4c9b5035-90a8-4d6d-a5a2-9d503733f22d", "comment": "Malware payload (Mirai)", "value": "b76a5774a2d77ad4be7ad4b93d85ed335c67fec30155d62f3f0ff3a9e8c63d90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "d40e1c2a-d213-43c2-b12f-9c22a004d0a2", "value": "T100936C03FD165F4AD14764F061F2C9704B12FCA649271EF6B9B6EAE98247EE870027", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "79db2969-1fe4-4378-8857-8d1285857752", "value": "1536:5tUAJGkkYq/B6LohE9lwnlE2LKAgdi7CQpfCcTBfIlDwSmIBH5:bUAJG1IshQlyRuAvLpfnBzSl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "cdb7cf86-0cd3-49df-8da6-8152902c8ca7", "value": 96572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "631eda1b-c292-462e-bedf-97bd7d77e26a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0a96d4e-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "638d05e4-54a8-42c6-b607-99e7387dbcd1", "comment": "Malware payload (Mirai)", "value": "a7c326799f1d81c73144c0644be5cc93", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "68cdaa96-8654-46b3-9b8a-acdc67bb0513", "comment": "Malware payload (Mirai)", "value": "43bedf7bb6ea4abad8c6a2e4a816c97230cf0e0ee461a286109f0aa61dd00be9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "bee9f6e0-ef6f-476d-92fa-1da42649945a", "value": "T16BC33A86BD418B12C4C325B6FE6F448D33136BF8D3EB31168E25AF6467868E70A376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "f73a520c-7e25-40fd-b222-dfbfa2268e05", "value": "3072:V82K0fOPQKzlRuWm7KJacKL86i5ILQCmxWH:xWo7qaxLH/LQLxWH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "c0873f63-0763-41c5-a94e-4aa8b8484c36", "value": 119532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "f56dc1cc-d0a5-4f1c-a282-0dd0a8dd9222", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0aa134f-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "c036afde-aed4-4324-aa4d-f5e97e137099", "comment": "Malware payload (Mirai)", "value": "007d0f55a2c3ea32659b96f2ac16bca2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "aacac5eb-a070-4028-9591-bacd3ffd05a4", "comment": "Malware payload (Mirai)", "value": "53bd7f7ea723b6a2854461c97e5703b2b970d843fc63d7c4bbdce67924b7354a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "0d047def-e685-4371-8d9a-18511b9734bf", "value": "T16BA34A4277094F83D19769F02ABB2BE04799FE6224F0E5847999FE8643308F36542F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "c9e4eea3-fd5c-4c34-9a63-b517ecd89202", "value": "1536:Bn8i8o3hCWFkFzBbZ6ADr9dhuKm3b/gJLqZOUrd9Y47KJWsIkxG:B8i8o3MWFs96AJLBUrD7Ms", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "ab191b49-9fc1-49ec-bac2-e58ff2b7129d", "value": 107028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "d9faf3a5-2604-4f1c-874b-ef19262fbc70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0ab96a0-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "6bbbd39b-1489-4f51-9d04-c8d1efda67a5", "comment": "Malware payload (Mirai)", "value": "205d689fb4f9c3572a1a293b44adef8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "e3f3146c-c5c2-4fe5-b446-e250c4ebaeca", "comment": "Malware payload (Mirai)", "value": "540844ff88d0d343becfa5512b556daf289e8d62b7727fcfbec5be02adf69326", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "327f72ea-0228-47a4-ace4-2b563dcb8a91", "value": "T19AA34C0779818DEEC45ED2F40BFB71309932FD2E0A3272DE6B90BE913A19D9039597", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "29c68007-9c06-44ae-9b26-c875f9684749", "value": "1536:2JKXpU4gzmhUR4n2+lzugSuizBpEQeBk3GS+NmzRuiI3reee:2JOpDH3n2+kgvi3ZqwGFmzEiI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "8cede26c-62dd-47f0-adf4-4e0b5a46f1b1", "value": 103288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "1b8356e5-1092-4209-9b2f-3aaf7e8d82b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0ac445c-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "49c3df72-92fa-4ef2-b2f0-bfa65aefdb61", "comment": "Malware payload (Mirai)", "value": "e5fec12ea4b8347832bc1efc15aa7825", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "33b2f8e0-a3d3-4e33-9b08-eee3647d3479", "comment": "Malware payload (Mirai)", "value": "44530a1f51017fa9f5ded69655d0638c0ee4498c1168030a816411c91741d006", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "f1d53756-3891-4757-b349-7da0a00381b9", "value": "T13DA31981F9878AFBD41744B401AAB33FDE31ED2E4436DA95FF606EB2D6235C122163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "aa87a75d-9785-40a7-8658-5e3064d63b23", "value": "1536:nZOuPhRMmmJppljN6Ldz2P9aF5teWxDWG8h0U6drzhqN7Rsk/s0A2BgQ:1e3Dj8Ldz24rEVbl6d/hwlskxu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "6f3d312b-fee2-4f31-9030-333e606445df", "value": 99048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "b679c279-4374-4fea-836c-e4c3e6fefc9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0ad9bc0-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "f0ed26f1-9086-4365-8ba4-72a35ccb3f31", "comment": "Malware payload (Mirai)", "value": "cef74e7045124d01066a0ea762ff5b37", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "fc5b4002-b7ec-49ce-9199-2c6c13e56704", "comment": "Malware payload (Mirai)", "value": "46d20cca8250134ee80d0eeb354d458ed189c107770fabec558a0c1de9ed4391", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "b7c0665c-5a5f-4053-9119-5df3560b0dd3", "value": "T159D3188AB9418F12C4D225FAFE9F418D33135BBCD3FB31128E259F65238699B0A776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "2aa03219-502a-48b1-9e40-f2683c0aca10", "value": "3072:pAAHpBk9EyK+IJuemb19UpatAZqzXEHuSTzm2sD4wQEU34/H:TMBBKpatmqzXEHuAzmawQEU34/H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "b7f7ddf3-6a3b-421e-aabb-40daf5b2d650", "value": 136216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "fd1f9feb-1577-4c4b-bb48-d5e4daa39b34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0afc880-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "810995e8-23a5-4f0d-9673-347783820e13", "comment": "Malware payload (Mirai)", "value": "b1ee5ecdbec420fd71c0831ea087ff9f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "a9f77acf-1ca9-4f89-9a41-f8a16c57bef0", "comment": "Malware payload (Mirai)", "value": "84ed97a13a82a82231c5fa8bcd63d895be9e06d1f1857460aaf6ed46a28ddc80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "9fed897a-e2b6-47d8-9ca7-75294ce4e290", "value": "T1A3B31946BD428B13C5D231F6BB6F458C371697B9D2EB3102DD26AFB0278A4D70A3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "7fa1699f-6cc5-4aa8-851f-41813693d641", "value": "3072:Nfc7KJAn64ZpeDD2lQeAH9KFCoHQ+uUkQR1BL:Xtee9KFZHQYJR1BL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "67396428-4903-4108-b6d3-881b5a34615e", "value": 111064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "b7dc1065-52ec-4986-b21d-67c21157d4eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0b010ac-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "71358e1e-b274-4e3e-9117-62d8d09ac8f8", "comment": "Malware payload (Mirai)", "value": "e9deb20f04f023d4ab34685c2b1ce52e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "feb96231-2cd5-4ff7-92da-cb05d4aa938b", "comment": "Malware payload (Mirai)", "value": "a017ca3c0a47d9896952b4517da6a8293b06dcb65ea2979616f92f6607bcfba3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "23150d44-63ec-44c5-9ae9-6da1aa361090", "value": "T1DBB31846BD428B13C5D221F7FB6E018D371A17B9D2EB7102DD2AAFA0375A4970E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "b69b7cbf-728a-4696-91af-5f61d1d75781", "value": "3072:EqRVY/eZn6OusUfyWBwZf69hMBAbsOp1Yq8OL:ks60UfPhM6bz2q8OL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "97342ba4-caff-481d-86cc-3d0430211398", "value": 112896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "9b90198d-097b-46f0-9866-3b3103ec3680", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0b0e432-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "2a10d413-bb45-44ba-94eb-ac02aba96e3f", "comment": "Malware payload (Mirai)", "value": "4650eae7d080a296e71d1d6d6f6af733", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "aea22c42-2dcc-4762-b16d-a574af9325c0", "comment": "Malware payload (Mirai)", "value": "f29e7c0dd81dd28fe36aeb23f783e777c99d8080285795a32e2051ed0d3b4324", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "c71ed012-513b-4ec5-9170-7d6a9ed95952", "value": "T1ACA33A43B7090F83D1936AF02A7B2BE05B9DFD9168B0D5846959FE8683315F22582F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "2cb77648-3b13-4bf9-bd73-8b688bca04fa", "value": "1536:NtjrL2WU+Dl2NGMKu6AdozTxDTVsu0pxumeTfJ4fTQtmMu7yWknYIDsAWxSyk:NtjrSWTMNGMKtAGtyfTQoMMI22", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "fd308420-ba91-427f-ac65-28f79cd81bb1", "value": 105364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "334d1c2b-5ef8-493a-a735-d933edaafc8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0b10a25-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "5cc7408e-0d65-4467-8888-666f3d9136b2", "comment": "Malware payload (Mirai)", "value": "b75c379a687af413220298285781c01a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "fdbdafa1-c8ef-46ef-b5ac-d135f757ee4e", "comment": "Malware payload (Mirai)", "value": "9be9baf58d9f1ab9c9dd0a0377540b53cf4c29694500e85d1a1b59c3d9f5f68b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "8c2ef87c-36fd-44a5-b96c-d42b3e7ab1e6", "value": "T105B32926BD768E17C4C271B512F30734E5B2A7AA1C7C950ABE721DC8AF242D031667", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "7886ef2f-6196-4bb5-b495-bf8420128cbe", "value": "1536:kGktO2lz+jtfieVCIW1jc2r5eU4kdhX4tJ0oD5VtlnpM+D7zx:k3lz6VSxhr5eULSX0o9xnLp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "d635ecbf-3b02-4dca-9c9a-332224b014aa", "value": 112176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "1ee54111-6119-401e-8798-33007740b606", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0b2aa90-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "5f2fcfa0-bad5-4aa2-b834-dd5228d563a5", "comment": "Malware payload (Mirai)", "value": "05a55a6d2f19315e44b72abf851f545c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "487e4e9f-e805-4c21-b0eb-7ecda83add70", "comment": "Malware payload (Mirai)", "value": "6106ce519f7e95a2cadf0ae0770ceda6a18c91873f97d1762ec655a2cd1c5881", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "42c3770d-0d0b-4f4e-b296-f89141bf15e6", "value": "T130B31AA3F901DE7BF00BE67680D30C057130FB7549835EA272267DA7EE790D62866E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "b176d449-32d6-472e-b5aa-428d75d9b6ca", "value": "3072:wRe/qwnsgeYjMPtHhRsdAUjrtyafRnO7EBZ8gqOWZ:ownsGPdyaJnOQBpqOWZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "c20ee12a-781e-4cc4-82d2-64103f3d785e", "value": 115444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "288c7d09-e67e-481c-a7fb-b3921b16e0c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0bc332c-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "447ccbfe-dddd-4af2-a72c-8b4928a9feb9", "comment": "Malware payload (Mirai)", "value": "96d25a28c227abfd549280af5e788bfe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "9243d89a-7558-43c2-8b62-25f959cd1ad6", "comment": "Malware payload (Mirai)", "value": "8fff8e9a86dcd7df612cad060a666911cf4a1d3ed470343c40b150af8b693ad0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "770fb885-06c0-4def-8ea1-a461aaf0332d", "value": "T15BD31802FF601FABD42FDD3346F90B1524CC6D5B22B52B797A30ED28B61A58606E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "0f713819-8dd9-4ed1-8a74-1783bbc76d9e", "value": "3072:lkjqFcxQ7G81sjbuE25pnvmYJ7N6LoU5ABdVYE6LernfR:6wcoyuE2HnvmIN68U5AfVYE6LernfR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "2e681680-e7db-44af-9107-aaaf1c009676", "value": 133224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "9a6dbeb7-0a4a-43b2-a9a7-816d50780b80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0be7df8-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "f012f2fc-821e-457a-826f-963e2ef679d1", "comment": "Malware payload (Mirai)", "value": "cf449f8af27f1b60c6aa6ef55e392fe0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "2790e2ba-3c00-439f-8b5f-ee90a04c8ca3", "comment": "Malware payload (Mirai)", "value": "c6c3ac80bb1f31bd44a9bb9a2f811f573c5a12eedce5822c659c0a4c1be3bf49", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "c3e73437-14d5-4822-9585-93cb5d449acb", "value": "T1BEA31885E3D3D5F9E80755B001ABEB769A30ED3315309EBAD760BFF265216C2A1163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "69fbaf7d-5084-49d8-820f-7b029e1ba4ef", "value": "1536:YAk2AS47FQEUAWyMgxeKej04Mvp57txc3kKtfJQ/7PUE31ZXrVTW2txr:USw8AWBVVjXMvpDxc3kRrXZD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "f9ef62d6-194e-4f82-b865-6d69e4b0c484", "value": 106348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "fe339337-9e99-4c5d-9c03-e5040bbdd930", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0cef27f-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776457632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "2fedba2e-f824-4a66-a195-b50b298065ef", "comment": "Malware payload (Mirai)", "value": "38defb47bffb8a507f57ed3716cf47d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "dc884e1a-4527-4bdb-a12e-6c3ca19e4270", "comment": "Malware payload (Mirai)", "value": "89fd6c771387c63ebe8d71d6326e10390550140a3385de99e51dc4ab9b7d068b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "5402f430-4a6b-4176-9d38-88e947f917c4", "value": "T1A8549E073B8A4DEAC66DC3B20EEBA3108B13F0350712E79F37646A647F4979C6C586", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "656ce7d3-b311-4f20-886d-fbdd5ae0c59c", "value": "6144:POd3iYi3XmEiIrWJOr/bMk59QlknPDM+k6ZxPOaP0rbyjbpblTE3TqjjicmmkZae:CEoOrDMk59QlknPDM+k6ZxPOaP0rbyjc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776457632, "uuid": "df91a2cc-5dfa-49d6-afe1-7ad5f01cc919", "value": 300506, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457632, "uuid": "e766cfcb-2ec8-4b11-a889-03bde26c8ea6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0828cb5-3aa1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776460181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776460181, "uuid": "05f7c0b1-fefc-4580-a8fd-935f1c2ed38d", "comment": "Malware payload (Mirai)", "value": "1419743414cafe0f3b5797739c478b93", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776460181, "uuid": "b3ee8a58-b310-4a27-870d-3c7b027f6ec2", "comment": "Malware payload (Mirai)", "value": "95ec7739d50ac227f17a4214a57f2b9093a57f61a52a05cdf2681be13f595e1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776460181, "uuid": "ff9f56d9-d5d0-4e11-bda7-37b53cf243c8", "value": "T11E6301DF21B0C01FDA26A2F56D7C4E82DD92C3EDD5251AED0264C66C8009627B7FC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776460181, "uuid": "8a44b363-1d2a-4648-944d-55c83d854ef3", "value": "1536:/CDyBzDYILeWm8mIgZfqAotHTRrGuPYIFXN3Z5Z8YGIjAhiUMzv:eszUOUIEfSrhYIF93Z5Z8qAh0D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776460181, "uuid": "62b58b1f-5916-4a61-ba39-4d6db5661451", "value": 69304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776460181, "uuid": "092dc082-f622-4d29-a3fa-d58c26a82aef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3cc148e-3aa9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776463623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776463623, "uuid": "36937404-29a1-4076-8fe3-24833bdb087a", "comment": "Malware payload", "value": "a57c23e2883bafd0eceac94696ceb111", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776463623, "uuid": "5fcb97d5-60e0-4b14-a0df-145a66196cc6", "comment": "Malware payload", "value": "e87ef89ff6ba223938670c08da40b78349af8809c86c9a0568c1e699e06d11a3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776463623, "uuid": "fed41c9e-95df-4384-b896-c1b5cda2819e", "value": "T16CD4DF6A49192F28D99330FF1872126ADE3EF08425D86F461DEF50704D6B70A2EA17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776463623, "uuid": "70569f81-6566-4774-a450-a995965775f1", "value": "12288:Elkr3NPTV3SkxKzly6lo3Y6ODgurZrmPdmI9SWVHGXV:Em57VlIzlyyLc8W4XV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776463623, "uuid": "90dcd520-4922-47e5-8e06-36fc536c8fa9", "value": 624340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776463623, "uuid": "ff2dc0e9-639e-407b-ae6b-d887b40e722e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384066, "uuid": "88360aec-39f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/alinaitweshalifu28-netizen/2/raw/refs/heads/main/1/3.log", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384076, "uuid": "8e1d280b-39f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/alinaitweshalifu28-netizen/2/refs/heads/main/1/3.log", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384077, "uuid": "8e860022-39f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/alinaitweshalifu28-netizen/2/refs/heads/main/1/4.log", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384078, "uuid": "8f38a629-39f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/alinaitweshalifu28-netizen/2/raw/refs/heads/main/1/4.log", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384253, "uuid": "f783008f-39f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lummesh8or.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384426, "uuid": "5efaef11-39f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hellenkamau197-gif/3/raw/refs/heads/main/4/7.log", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384426, "uuid": "5f0ce158-39f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hellenkamau197-gif/3/refs/heads/main/4/8.log", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384427, "uuid": "5f31e657-39f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hellenkamau197-gif/3/raw/refs/heads/main/4/8.log", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384427, "uuid": "5f68fc04-39f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hellenkamau197-gif/3/refs/heads/main/4/7.log", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384550, "uuid": "a8ca26ac-39f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://valu-span.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384848, "uuid": "5a3ad4d3-39f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://roughengine.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776384922, "uuid": "86a74bdc-39f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.211.136:40481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385155, "uuid": "1153f59f-39f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.9.139.117:56264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385156, "uuid": "120402c5-39f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.223.252.123:55034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385209, "uuid": "31ab968e-39f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://peakree.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385213, "uuid": "34092208-39f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.90.30:52537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385278, "uuid": "5a71576a-39f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.78.29:59508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385340, "uuid": "7f9c90b6-39f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.34.242.49:40798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385448, "uuid": "c03307a7-39f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hellenkamau197-gif/185/refs/heads/main/4/9.json", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385449, "uuid": "c051a6ff-39f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hellenkamau197-gif/185/raw/refs/heads/main/4/9.json", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385568, "uuid": "078135f0-39f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaq4sdju.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776385927, "uuid": "dd2becd7-39f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynamicsoun.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776386166, "uuid": "6c21d15c-39f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.211.136:40481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776386227, "uuid": "907f5093-39f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://echoblend.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776386587, "uuid": "671531f7-39f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://castexport.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776386841, "uuid": "fe3103bd-39f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.18.228:37422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776386888, "uuid": "19ffa25f-39f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ae5z56.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776387248, "uuid": "f0854a3d-39f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://listeshap.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776387547, "uuid": "a2d596fc-39f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-nirnbl.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776387909, "uuid": "7afd070a-39f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mnwgjp.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776387982, "uuid": "a663eb62-39f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.90.38:41123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776388210, "uuid": "2df1a802-39fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://d43mon-field.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776388219, "uuid": "336c266a-39fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.214.149.164:39548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776388568, "uuid": "03952dea-39fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rtrr.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776388569, "uuid": "0438ea59-39fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.237:38811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776388698, "uuid": "50e1bbfb-39fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.23.125:53054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776388816, "uuid": "978e7faf-39fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.190.220:36078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776388928, "uuid": "da51ea12-39fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-nexos.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776389287, "uuid": "b04b7244-39fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcorear.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776389589, "uuid": "63ea574d-39fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://labeltheory.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776389595, "uuid": "67f30219-39fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.23.184:58755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776389829, "uuid": "f309f750-39fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.247.124:44677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776389952, "uuid": "3c3e1a5d-39fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.253.80.63:48921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776390010, "uuid": "5ef2711b-39fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fsefumza.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776390139, "uuid": "abbe1b1c-39fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.90.38:41123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776390247, "uuid": "ec9e68da-39fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velspire3on.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776390609, "uuid": "c435cc43-39ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcore0ix.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776390911, "uuid": "780476f7-3a00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zme1roui.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391150, "uuid": "064fd6fa-3a01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.173:41732/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391328, "uuid": "70d70369-3a01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velvenor9.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391524, "uuid": "e5c1fdef-3a01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.253.80.63:48921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391567, "uuid": "ff076234-3a01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sketc-gate.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391634, "uuid": "26e4329c-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.9.156.250/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391638, "uuid": "29be1cd2-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.9.156.250/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391638, "uuid": "29be218c-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.9.156.250/bins/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391639, "uuid": "29cda8f0-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.9.156.250/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391639, "uuid": "29cda974-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.9.156.250/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391639, "uuid": "29ce0670-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.9.156.250/bins/pspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391639, "uuid": "29d26e10-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.9.156.250/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391639, "uuid": "29d8e411-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.9.156.250/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391641, "uuid": "2b1c77d2-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.9.156.250/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391641, "uuid": "2b1ca103-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.9.156.250/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391926, "uuid": "d4e5d4a5-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9waxfs6b.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776391936, "uuid": "db07cd3c-3a02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.127.186:54786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392287, "uuid": "ac3381cf-3a03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sharpsummit.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392464, "uuid": "15cec81a-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/rcuop_0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392464, "uuid": "15cecac4-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/bioset0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392464, "uuid": "15ced009-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/kworker_u8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392465, "uuid": "16aa9784-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/jbd2_sda1d", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392465, "uuid": "16aa98c6-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/ksoftirqd0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392465, "uuid": "16aa993d-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/ecryptfsd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392465, "uuid": "16aa9beb-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/cfg80211d", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392465, "uuid": "16aa9bfc-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/devfreq_wq", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392465, "uuid": "16aaa832-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/edac_polyd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392465, "uuid": "16aaa9a3-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/kswapd0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392465, "uuid": "16aab298-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xfsaild_sda", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392465, "uuid": "16aadf1b-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/kblockd0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392465, "uuid": "16ab2514-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/scsi_tmf_0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392475, "uuid": "1c9fa57a-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/zswap_shrinkd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392595, "uuid": "63ecf25f-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fernretai.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392710, "uuid": "a86aa8bd-3a04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.246.161:51320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776392947, "uuid": "35b6fa95-3a05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pa5tu-drive.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776393019, "uuid": "60d7766d-3a05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.242:37872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776393308, "uuid": "0d18c977-3a06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://491ptjh.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776393668, "uuid": "e372c6b2-3a06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://norlithix3.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776393742, "uuid": "0f540a06-3a07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.205.156:59443/Mozi.m", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776394211, "uuid": "26fbe69b-3a08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-4uth.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776394447, "uuid": "b404330e-3a08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scalesign.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776394628, "uuid": "1fa94c1a-3a09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kel-venor.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776394927, "uuid": "d21793c1-3a09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://393llqb.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776395288, "uuid": "a93ec859-3a0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vvood-forge.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776395589, "uuid": "5c66d89e-3a0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spedus.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776395591, "uuid": "5d84be7f-3a0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.24.231:43022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776395897, "uuid": "14192498-3a0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.64.242.58:34765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776395957, "uuid": "37fdff15-3a0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.222.68:60666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776396014, "uuid": "59a18e74-3a0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-cov.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776396260, "uuid": "ec8de57b-3a0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.230.251:52904/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776396315, "uuid": "0d488cfc-3a0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-ring.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776396438, "uuid": "56a938d6-3a0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.156.165:37041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776396612, "uuid": "be3dec45-3a0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.99.250:42926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776396613, "uuid": "bf12f64e-3a0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://torr3nt-layer.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776396914, "uuid": "722dd9f4-3a0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.19.0:59578/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776396966, "uuid": "915e4504-3a0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qpp9.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776397099, "uuid": "e0b47a34-3a0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.24.231:43022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776397328, "uuid": "69194056-3a0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://167lo.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776397401, "uuid": "943f5677-3a0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.222.68:60666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776397629, "uuid": "1c13584b-3a10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://densefro.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776397873, "uuid": "adaeba1c-3a10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.169.164:45106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776398049, "uuid": "16fed241-3a11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jhknytxr.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776398359, "uuid": "cf433205-3a11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.230.251:52904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776398411, "uuid": "ee43cb6d-3a11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://28mp.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776398710, "uuid": "a0973aa4-3a12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arraynotifier.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776398772, "uuid": "c5988e9c-3a12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.19.0:59578/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776399011, "uuid": "540579ea-3a13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.192.153:49373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776399066, "uuid": "74f21b0b-3a13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qu4nt-panel.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776399320, "uuid": "0c49b2c3-3a14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.0.45.163:50787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776399368, "uuid": "28df18ee-3a14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://byteash.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776399671, "uuid": "ddb9ee25-3a14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://public-lesson1.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776400035, "uuid": "b6aeec41-3a15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://student-form2.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776400153, "uuid": "fcfcdb8f-3a15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.11.151:39937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776400340, "uuid": "6c6e4e6c-3a16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.153.123:50902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776400392, "uuid": "8b5a36e8-3a16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://online-course3.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776400690, "uuid": "3caf1900-3a17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://study-material4.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776401053, "uuid": "1526cd62-3a18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://class-report5.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776401057, "uuid": "177d9deb-3a18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.0.45.163:50787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776401360, "uuid": "cc71cb27-3a18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://70.31.230.2:36830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776401412, "uuid": "eaedcee1-3a18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://final-grade6.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776401656, "uuid": "7cb1dd6c-3a19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://travel-guide1.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776402011, "uuid": "5057f3cb-3a1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotel-booking2.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776402200, "uuid": "c1161476-3a1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.97:40062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776402323, "uuid": "0a561adf-3a1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.220.145.182:46710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776402323, "uuid": "0a6bdc80-3a1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.220.145.182:46710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776402375, "uuid": "2966ad5f-3a1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tourist-map3.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776402734, "uuid": "ff38212d-3a1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://beach-resort4.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776403092, "uuid": "d4cc24c8-3a1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trip-advisor5.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776403451, "uuid": "aa6b1d21-3a1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://local-event6.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776403686, "uuid": "3698788d-3a1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.97:40062/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776403693, "uuid": "3a8d9caa-3a1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://office-paper1.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776403997, "uuid": "f005524b-3a1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.78.92:60415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776404054, "uuid": "12241915-3a1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pencil-case2.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776404409, "uuid": "e582163a-3a1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://black-marker3.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776404771, "uuid": "bd5d71ce-3a20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-board4.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776405071, "uuid": "700d10df-3a21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glue-stick5.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776405080, "uuid": "75b49fc7-3a21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.12.227:60768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776405432, "uuid": "4799f8dc-3a22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://desk-folder6.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776405676, "uuid": "d8c9d906-3a22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.34.70:35711/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776405735, "uuid": "fc3559e6-3a22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-service1.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776405736, "uuid": "fc83753b-3a22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.39.66:34917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406087, "uuid": "cdcd45fd-3a23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clean-house2.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406158, "uuid": "f83dc8da-3a23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.39.66:34917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406220, "uuid": "1d126035-3a24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.230.129:39176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406453, "uuid": "a7e343b9-3a24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://repair-work3.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406514, "uuid": "cc74fa25-3a24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://connect.kexlore.cfd/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406527, "uuid": "d3dcea6f-3a24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imagefre9003.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406572, "uuid": "eee899fd-3a24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.12.227:60768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406588, "uuid": "f86e2dc4-3a24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gemini-console.com/install.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406588, "uuid": "f8803eb6-3a24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://install-claude.com/install.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776406752, "uuid": "5a252895-3a25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://garden-view4.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776407008, "uuid": "f28d06a0-3a25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.21:58129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776407115, "uuid": "3284a4c9-3a26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://water-pipe5.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776407414, "uuid": "e46c0c3a-3a26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-door6.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776407467, "uuid": "04747478-3a27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.230/Ventrilo.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ZigClipper", "colour": "#72f06d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776407485, "uuid": "0ecd0634-3a27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.135.1:54465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776407711, "uuid": "95ec33ed-3a27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://photo-frame1.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776407781, "uuid": "bf9c0c55-3a27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.230.129:39176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408069, "uuid": "6ae177d8-3a28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://image-zoom2.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408141, "uuid": "95c1726d-3a28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.28.13:58215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408433, "uuid": "43e9ed45-3a29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://picture-book3.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408727, "uuid": "f34f5a1c-3a29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://video-clip4.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408754, "uuid": "0360b846-3a2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.245.139:33722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776408976, "uuid": "87d9e305-3a2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.135.1:54465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776409087, "uuid": "c9ef7635-3a2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.215.159.4:11029/stub.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776409093, "uuid": "cd440189-3a2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sound-track5.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776409447, "uuid": "a0582322-3a2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media-player6.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776409765, "uuid": "5dbf276e-3a2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.154.48:51949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776410053, "uuid": "0972aec5-3a2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://car-rental1.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776410227, "uuid": "713fd16e-3a2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-drive2.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776410241, "uuid": "7968c58b-3a2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.18.228:37422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776410364, "uuid": "c2e19d85-3a2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.245.139:33722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776410364, "uuid": "c2e74539-3a2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.34.70:35711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776410473, "uuid": "03e8aea9-3a2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://road-trip3.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776410770, "uuid": "b4f21aa1-3a2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auto-parts4.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776410788, "uuid": "bfeae737-3a2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.84.241:56956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776411018, "uuid": "48e135ea-3a2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.140.19:58527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776411018, "uuid": "48e6d13d-3a2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.6:58845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776411067, "uuid": "65f0cf6e-3a2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gas-station5.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776411137, "uuid": "90018d81-3a2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.157.83.132:54022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776411201, "uuid": "b59f178b-3a2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.154.48:51949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776411428, "uuid": "3d0afe3a-3a30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-park6.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776411624, "uuid": "b1bd90ee-3a30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.157.83.132:54022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776411683, "uuid": "d4f3d31e-3a30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.212.150.196:39749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776412283, "uuid": "3ac28f7a-3a32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.179.161:43331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776412337, "uuid": "5abd7f06-3a32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.129.33:38778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776412750, "uuid": "50eec4cc-3a33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.6:58845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776412750, "uuid": "51081694-3a33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.84.241:56956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776412877, "uuid": "9d1787c4-3a33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.153.123:50902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776413648, "uuid": "68921cd2-3a35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.122.144/img/hb/img_193055.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776413708, "uuid": "8c2705bb-3a35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.179.161:43331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776413781, "uuid": "b7e7d4d1-3a35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.129.33:38778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776413947, "uuid": "1abbba04-3a36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://daily-news1.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776414038, "uuid": "50cbb963-3a36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.169.111:45647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776414379, "uuid": "1c593611-3a37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.254.132:47366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776414428, "uuid": "39225f7e-3a37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://world-press2.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776414610, "uuid": "a58cf0f4-3a37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sport-match3.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776414789, "uuid": "10c857f8-3a38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://weather-post4.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776414921, "uuid": "5efedc7f-3a38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.172.186.157:33684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776415147, "uuid": "e5ec86c5-3a38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-topic5.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776415335, "uuid": "55ce2011-3a39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.252.211.71:51994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776415402, "uuid": "7e23c56f-3a39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.9.222:44336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776415509, "uuid": "bdbd7504-3a39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://live-stream6.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776415810, "uuid": "71060584-3a3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-food1.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776415936, "uuid": "bc147742-3a3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.172.186.157:33684/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776416168, "uuid": "46300ec1-3a3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-meal2.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776416468, "uuid": "f9034f87-3a3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-dish3.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776416589, "uuid": "416a4fed-3a3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.125.14:45999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776416887, "uuid": "f2c4672a-3a3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-cake4.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776416895, "uuid": "f7d8a0bf-3a3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.9.222:44336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776417077, "uuid": "6458798b-3a3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.161.68:34121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776417131, "uuid": "84941469-3a3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-juice5.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776417201, "uuid": "ae2ce2dc-3a3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.252.211.71:51994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776417491, "uuid": "5b084ebe-3a3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-drink6.bov1serin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776417790, "uuid": "0d4ae150-3a3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-book1.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776417859, "uuid": "3620a365-3a3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.234.121:58938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776417910, "uuid": "54ecb251-3a3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.169.111:45647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776418037, "uuid": "a0c15d0c-3a3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.234.121:58938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776418147, "uuid": "e252718d-3a3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://read-more2.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776418567, "uuid": "dc8ef3d0-3a40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://page-number3.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776418822, "uuid": "74a74051-3a41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.150.21.18:41322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776418871, "uuid": "91550946-3a41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-seller4.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776419168, "uuid": "42a20538-3a42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-author5.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776419415, "uuid": "d6109498-3a42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.28.13:58215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776419590, "uuid": "3e3ff1ce-3a43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://old-library6.qim8dorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776419599, "uuid": "43752c94-3a43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.15.227:52036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776419829, "uuid": "ccc1fe87-3a43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-hall1.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776420070, "uuid": "5bfe7501-3a44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.153.144:55285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776420075, "uuid": "5f20ea51-3a44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.241.19:51449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776420249, "uuid": "c707a992-3a44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://back-yard2.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776420548, "uuid": "79639312-3a45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-floor3.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776420860, "uuid": "3365b3d3-3a46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://side-door4.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776421211, "uuid": "0443ea72-3a47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guest-room5.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776421569, "uuid": "d9ce0a29-3a47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://safe-place6.zav3liten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776421634, "uuid": "008634b7-3a48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.153.144:55285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776421823, "uuid": "711e1619-3a48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.241.19:51449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776421874, "uuid": "8f40c46b-3a48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gift-shop1.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776422229, "uuid": "633b1b45-3a49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://super-sale2.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776422299, "uuid": "8c928015-3a49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.80.74:55119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776422363, "uuid": "b3388eff-3a49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.105.71:39727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776422534, "uuid": "190403a7-3a4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://promo-code3.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776422541, "uuid": "1ccac877-3a4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.58.125:44720/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776422786, "uuid": "af5a0179-3a4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.31.247:59281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776422958, "uuid": "15ae4882-3a4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thecowardlydog.com/courageme/mailbox-agent.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776422968, "uuid": "1b712d26-3a4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.157.55:46743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423135, "uuid": "7ede9860-3a4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-price4.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423203, "uuid": "a7a29822-3a4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.76.45:37154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423315, "uuid": "ea86b174-3a4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stock-item5.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423317, "uuid": "ebab9624-3a4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.80.74:55119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423366, "uuid": "08ac9b62-3a4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/oblivora/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423383, "uuid": "131b2573-3a4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.91.178:50532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423615, "uuid": "9d28ea78-3a4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-card6.nuv7porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423625, "uuid": "a2f9d642-3a4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.122.75:44241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423733, "uuid": "e380d9c7-3a4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.70.27:49366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423801, "uuid": "0c24c130-3a4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.153.74:52107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776423852, "uuid": "2a9cbccb-3a4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://team-work1.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776424164, "uuid": "e48add49-3a4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.105.71:39727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776424269, "uuid": "231bf016-3a4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://group-chat2.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776424518, "uuid": "b7891b04-3a4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.76.45:37154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776424519, "uuid": "b828aaf3-3a4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.58.125:44720/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776424634, "uuid": "fc6d9b8a-3a4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://staff-only3.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776424705, "uuid": "27336e36-3a4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.91.178:50532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776424926, "uuid": "aa79b196-3a4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6493278841/kglQns8.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776424932, "uuid": "adf99a68-3a4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://office-hour4.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425288, "uuid": "8279a0e0-3a50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meet-point5.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425594, "uuid": "390336e7-3a51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.43.82:49208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425656, "uuid": "5dcd887a-3a51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://join-list6.vym2siren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425723, "uuid": "858ebecf-3a51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.76:40149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425782, "uuid": "a8ac591d-3a51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.153.74:52107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425948, "uuid": "0bdc33a2-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.210.18:47466/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425948, "uuid": "0bf608a8-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.173:48142/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425949, "uuid": "0c4f70b3-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.119.164.207:48407/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425949, "uuid": "0c8bff09-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.83.46:55613/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425950, "uuid": "0cd9ae1f-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.53:33301/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425951, "uuid": "0d70f134-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pure-water1.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425951, "uuid": "0d961643-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.206.118:33124/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776425961, "uuid": "137c955b-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.8.35:38376/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426011, "uuid": "316b9ede-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.70.27:49366/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426011, "uuid": "316e8b9e-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.103.138:58882/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426011, "uuid": "3171af8b-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.204.196.136:38329/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426011, "uuid": "3180e757-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.153.184:48539/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426012, "uuid": "31e5745b-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.159.211:33151/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426012, "uuid": "31e575d3-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.48.79:51782/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426012, "uuid": "31f76629-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.203.84:53522/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426012, "uuid": "3215b6ba-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.183.196.223:57863/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426035, "uuid": "3fccee01-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.227.107:56216/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426067, "uuid": "52c5a8fb-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.227.107:56216/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426067, "uuid": "52fee539-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.103.138:58882/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426068, "uuid": "5313443c-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.210.18:47466/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426068, "uuid": "5313e7e5-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:51083/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426068, "uuid": "532ee636-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.175.166:45571/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426068, "uuid": "53746b82-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.167.107.155:44344/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426068, "uuid": "537576fd-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.31.202:44828/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426068, "uuid": "537d8cb9-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.83.224:49826/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426068, "uuid": "53831f02-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.172.186.155:39086/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426069, "uuid": "53a48bdf-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.94.220:40202/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426069, "uuid": "53dd738f-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.119.117:45117/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426128, "uuid": "76fcc21d-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.27.237:56619/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426128, "uuid": "772c2800-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.173:48142/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426128, "uuid": "772dca51-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.102.0:56547/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426128, "uuid": "772dec10-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.245.189:49060/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426128, "uuid": "7739066f-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.179.97:11709/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426128, "uuid": "773964f1-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.174.246.101:39962/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426128, "uuid": "773ffa83-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.217.13:40757/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426129, "uuid": "778eb966-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.241.193:48944/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426129, "uuid": "779004df-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.252.99:33257/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426129, "uuid": "779ebe7d-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.244.223.22:45208/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426129, "uuid": "77a3d281-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.232.2:45636/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426131, "uuid": "78f0eae7-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.128.64.41:45269/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426136, "uuid": "7ba6ebed-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:50560/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426187, "uuid": "9a543545-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.130.24.183:50835/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9bca8815-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.179.97:11709/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9bcec934-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.7.35:41054/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9bdca5eb-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.234.154.89:47455/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9bdcadcf-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.5.19:46960/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9be0da8c-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.34.90:52380/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9bfaf10e-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.255.218:60226/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9c0c43a5-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.246.71:50610/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9c181c84-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.101.224:36752/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9c2d17f9-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.247.200:58322/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9c41fa9c-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.169.136:53911/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9c450778-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.94.163:54609/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426190, "uuid": "9c4ae7db-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.176.21:55770/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426191, "uuid": "9c5d3908-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.248.72:48002/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426191, "uuid": "9c5d57e1-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.39.77:32770/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426191, "uuid": "9c6ebda1-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.248.72:48002/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426191, "uuid": "9c7586d2-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.150.107.222:43071/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426193, "uuid": "9d9248f1-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.241.151:58007/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426247, "uuid": "be498a02-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.171.118:54237/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426248, "uuid": "be5912c2-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.113.169:46344/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426248, "uuid": "be5a0cd9-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.200.237.170:45286/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426248, "uuid": "be5a0f07-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.39.77:32770/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426248, "uuid": "be62ad91-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.176.21:55770/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426248, "uuid": "be734c04-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.33.212:49390/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426248, "uuid": "be9c3747-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.157.47.152:56511/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426248, "uuid": "beb60540-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.172.180:51494/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426249, "uuid": "beeff504-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.191.122:52368/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426261, "uuid": "c681be0c-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.83.46:55613/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426273, "uuid": "cd5cf0b4-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.99.220:40474/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426310, "uuid": "e3563dcc-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.232.2:45636/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426310, "uuid": "e3592951-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.27.237:56619/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426310, "uuid": "e35f56ba-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.94.220:40202/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426310, "uuid": "e36d19ea-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.31.202:44828/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426310, "uuid": "e374b22d-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.101.224:36752/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426310, "uuid": "e393573f-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.144.166:43917/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426310, "uuid": "e39f830f-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.7.76:48097/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426310, "uuid": "e3a5e6f6-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.42.111.45:51609/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426310, "uuid": "e3c07377-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.225.75:51201/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426310, "uuid": "e3c38db7-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.251.38:47347/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426311, "uuid": "e3e884b0-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.74.93:58121/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426314, "uuid": "e5b05f8a-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.139.213.64:46092/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426314, "uuid": "e616787a-3a52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-sky2.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426366, "uuid": "04affe33-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.163.187.213:60651/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426366, "uuid": "05155862-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.44:46312/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426367, "uuid": "057570ed-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.42.111.45:51609/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426367, "uuid": "05868166-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.128.64.41:45269/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426367, "uuid": "0594442b-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.94.163:54609/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426367, "uuid": "05a16702-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.251.38:47347/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426368, "uuid": "06159810-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.221.192:37406/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426380, "uuid": "0d1940f8-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.252.159.79:39580/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426553, "uuid": "7442fe7c-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-rain3.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffaac979-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mybiggestjoy.bond/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffab8491-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mymicroblog.lat/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffb54705-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudflare-check.cfd/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffb7e1d9-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mybiggestjoy.bond/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffbe08c1-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mrazotalog.lol/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffc28457-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://denegnet.click/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffc30f6b-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://blatnoitovar.xyz/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffc52674-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mymicroblog.lat/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffc6877a-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://diddyparty.click/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffc79335-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://etokrol.lol/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffcc3cb3-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bigboysclub.cyou/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffcd6fbe-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blatnoitovar.xyz/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffe1d844-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://merengagoi.bond/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "ffe9f749-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://myverifyblog.sbs/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "fff27b83-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://productionmaza.cyou/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "fff5c9b1-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://etokrol.lol/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "fff84ac4-3a53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gooddogshop.click/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "000f7a6c-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://diddyparty.click/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "001d1f8b-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://denegnet.click/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "0024a763-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://productionmaza.cfd/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426787, "uuid": "002c610a-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blobtop.sbs/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "003461b3-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://microblob.bond/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "0042058a-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mygoodblog.bond/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "0074c38e-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sirata.asia/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "007522ab-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://myverifhouse.sbs/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "00819e39-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://allplanetssame.cfd/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "0082f5c4-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mrazotalog.lol/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "0083dd16-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://myverifhouse.sbs/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "00876006-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brukva.shop/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "00890571-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://productionmaza.cyou/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "009e498b-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://antongandon.club/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "00a5cba7-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://allplanetssame.cfd/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "00a6d555-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://bigboysclub.cyou/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "00a76cb1-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://productionmaza.cfd/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "00b2e608-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://cloudflare-check.cfd/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "00c43d33-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://myverifyblog.sbs/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426788, "uuid": "00c68ac2-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://158.94.210.248/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426789, "uuid": "00d89db6-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://goodgoodmoon.bond/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426789, "uuid": "00f30067-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mygoodblog.bond/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426789, "uuid": "00fbe650-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://biggestchlen.xyz/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426789, "uuid": "01072c06-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://krempie.xyz/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426789, "uuid": "0135269f-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bigbadwolf.click/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426789, "uuid": "01380729-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://brukva.shop/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426789, "uuid": "013822ba-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bestwebchlen.cyou/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426790, "uuid": "0175c905-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://productionmaza.sbs/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426790, "uuid": "01d1e722-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.248/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426791, "uuid": "026aa6b8-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://beacon-mysummitfcu.org/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426802, "uuid": "090d8816-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.76:40149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426803, "uuid": "09864557-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bigblograin.bond/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426803, "uuid": "0988fb53-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mygoodblog.sbs/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426803, "uuid": "09a66ed9-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mygoodblog.cyou/files/FAvFf4V3.exe", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426971, "uuid": "6d4b2958-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-sun4.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776426981, "uuid": "734d9113-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.49.22:45515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427207, "uuid": "fa2bbfb4-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.155.246/m-i.p-s.Sakura", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427209, "uuid": "fb4246e2-3a54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.57.243.129/bot.pl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427264, "uuid": "1c527390-3a55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/bins/loader.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427265, "uuid": "1c8c84d2-3a55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://13.60.36.54/bot", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427265, "uuid": "1cc37a4d-3a55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.12.51:49907/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427273, "uuid": "218731f1-3a55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-wind5.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427340, "uuid": "49aa829c-3a55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.43.82:49208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427390, "uuid": "67305458-3a55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/api/index.php?q=spd6tEJQ1n0nrmnkxaQ", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427630, "uuid": "f6694832-3a55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-tree6.tav9dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427809, "uuid": "612ae868-3a56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.32.249.165:57203/mozi.m", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427809, "uuid": "612ae8ee-3a56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.32.249.165:57203/Mozi.a", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427873, "uuid": "8763bb89-3a56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.75.111:55169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776427931, "uuid": "a9b08183-3a56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://post-card1.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776428536, "uuid": "1221c5eb-3a58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail-box2.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776428768, "uuid": "9ce066a2-3a58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-ship3.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776428779, "uuid": "a31933e5-3a58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/atomic/main_x86_64", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776428951, "uuid": "09c23b07-3a59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pack-unit4.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776429077, "uuid": "55174997-3a59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.8.2:37503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776429140, "uuid": "7a99bac5-3a59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.49.22:45515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776429311, "uuid": "e01bb97f-3a59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://long-way5.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776429318, "uuid": "e4c2ac42-3a59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.25.4:43914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776429486, "uuid": "487a34cf-3a5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8757285646/4hzDW0t.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776429546, "uuid": "6c5990bb-3a5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8028208931/cT38Lcc.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776429608, "uuid": "918af5f7-3a5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://done-task6.kiv5leren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776430091, "uuid": "b1644e6d-3a5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-tomato1.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776430566, "uuid": "cc6751ee-3a5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-potato2.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776430817, "uuid": "620e5735-3a5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.25.4:43914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776430988, "uuid": "c806a959-3a5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-salad3.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776431045, "uuid": "ea03d0bb-3a5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.242/service", "Tag": [ { "name": "B", "colour": "#847a52", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776431045, "uuid": "ea0e232f-3a5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.242/update", "Tag": [ { "name": "1", "colour": "#1cace5", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776431109, "uuid": "101fb9af-3a5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.76.71:55889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776431165, "uuid": "31564366-3a5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.242/ycl", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "d", "colour": "#207d31", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776431242, "uuid": "5f6ec989-3a5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.204.187:40649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776431413, "uuid": "c5252c59-3a5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://baked-pizza4.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776431419, "uuid": "c908cd38-3a5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.1.26.13:37310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776431469, "uuid": "e685af5b-3a5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.10.193:43192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776431785, "uuid": "a2f7ff1c-3a5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/image222.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776431954, "uuid": "0762e42a-3a60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-coffee5.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776432194, "uuid": "96b1434a-3a60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/amvefrray/triageisusck/-/raw/main/L7XH7UR9695U.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776432679, "uuid": "b7cab2f0-3a61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.90.210:52857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776432730, "uuid": "d62227b9-3a61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-water6.lom5terax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776432735, "uuid": "d963ee31-3a61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.76.71:55889/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776432916, "uuid": "453639dd-3a62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://forest-walk1.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776433087, "uuid": "aaf81e02-3a62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bandgarms.com/NDZMNEMHUSRREHRJFWSB", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776433087, "uuid": "ab272ede-3a62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bandgarms.com/DGSOAFYJKXROATIQSWNZ", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776433146, "uuid": "ce37dc5f-3a62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://overly.dinergysolutions.org", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776433273, "uuid": "1996d584-3a63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mountain-top2.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776433569, "uuid": "ca915d9a-3a63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.204.187:40649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776433749, "uuid": "356f7034-3a64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://river-bank3.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776433758, "uuid": "3b21d0bb-3a64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.10.193:43192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776433943, "uuid": "a9415d84-3a64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.135.20:60119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776433990, "uuid": "c5264154-3a64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.135.39:49209/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776434057, "uuid": "ecfcd86c-3a64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.33.91:57739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776434115, "uuid": "0ff40933-3a65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.90.210:52857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776434229, "uuid": "53997ff7-3a65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lake-view4.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776434596, "uuid": "2e8696a2-3a66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.48:43722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776434647, "uuid": "4c874a80-3a66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.95:7777/158.94.211.95/leoo/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776434661, "uuid": "55438069-3a66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.135.39:49209/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776434778, "uuid": "9aec6564-3a66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.243.51:34729/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776434950, "uuid": "0143b3fa-3a67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://desert-sand5.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435070, "uuid": "48e70ff3-3a67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.76/89/givemebestthingswithbetterwithgreat.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435127, "uuid": "6b283d73-3a67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ocean-wave6.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435190, "uuid": "905516c0-3a67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://corwineagles.com/masse.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435308, "uuid": "d714dd26-3a67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/rumpnew.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435368, "uuid": "fa44afe8-3a67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/DXknkBUr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435372, "uuid": "fcac5d7f-3a67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/dll%2Fdll%20newaaaaaaaaa.txt?alt=media&token=92418096-85c5-4090-a574-5c807c304562", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435426, "uuid": "1d6abce2-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/xyupaid.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435430, "uuid": "1fb97717-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vxugfeari7.ufs.sh/f/I7IEyUJ1BHQRUeruOIYwg1RASFWI5zfwOZtLkXBx0Ehuq42v", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435439, "uuid": "24d0b6df-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/rumpshitnew.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435491, "uuid": "43bd6031-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_AddInProcess32.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435550, "uuid": "672ca56d-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/tumfuf.txt?ref_type=heads", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435550, "uuid": "6733e8a2-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/31ago.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435557, "uuid": "6b1041b4-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.48:43722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435610, "uuid": "8b04a8de-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_cvtres.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435611, "uuid": "8b3d032d-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_AppLaunch.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435612, "uuid": "8c4012ed-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_RegAsm.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435614, "uuid": "8d734732-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_InstallUtil.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435614, "uuid": "8d734f22-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_RegSvcs.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435615, "uuid": "8db8c145-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/class.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435618, "uuid": "8f9901df-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/31agosto.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435618, "uuid": "8fa269e1-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_aspnet_compiler.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435619, "uuid": "9000e9ce-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_MSBuild.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435619, "uuid": "903c5f79-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/elpolacodelnorteoficial-group/elpolacodelnorteoficial-project/-/raw/main/CRYP2_jsc.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435740, "uuid": "d884a5b7-3a68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.243.51:34729/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776435865, "uuid": "228c456c-3a69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://merchant-gateway.live/update.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776436273, "uuid": "15d7223a-3a6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/2a9ugis6zfmrh4g/0BRK22Z336890ESNQO_Arb748491G1F8Vougrn.iso/file", "Tag": [ { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437002, "uuid": "c84729b2-3a6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.38:40766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437602, "uuid": "2e5a65cf-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/image09iug0.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437663, "uuid": "52601f91-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imagecdg09.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437707, "uuid": "6c90f44d-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8356237953/JDgf7L9.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437727, "uuid": "78aa994e-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/image77490p.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437828, "uuid": "b4d68758-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.241.193:48944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437840, "uuid": "bbe0297a-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imagefresk090.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437893, "uuid": "db9e6251-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imagelokoko222.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437900, "uuid": "e004336b-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imageYYYY1.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437947, "uuid": "fc08d2a7-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imagehola21.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776437950, "uuid": "fd7e7b01-3a6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imagesddff00.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438009, "uuid": "20ad387d-3a6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/run.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438011, "uuid": "21b9b780-3a6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imageven098.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438503, "uuid": "46e21cba-3a6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imageiuyre99.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438549, "uuid": "62abcaf4-3a6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-watch1.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438550, "uuid": "632a76f1-3a6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imagepoiuy0.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438849, "uuid": "1564c463-3a70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glass-lens2.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776438978, "uuid": "6206d6e3-3a70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.149.107.54:41481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439036, "uuid": "850ab1b7-3a70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.149.107.54:41481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439037, "uuid": "855b357c-3a70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.65.159.56:52425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439270, "uuid": "10134a70-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://photo-camera3.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439405, "uuid": "60d5d1a5-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.237.166:44860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439462, "uuid": "83076992-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.227.182:42377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439510, "uuid": "9f480bb4-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439512, "uuid": "a0d8c1d3-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439574, "uuid": "c59b2861-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439574, "uuid": "c5a7de3f-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439574, "uuid": "c5b98814-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439574, "uuid": "c5c3dd0f-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.144.166:43917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439575, "uuid": "c5fc0504-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "c8e9fcb6-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "c8e9feeb-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "c8ea2949-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "c8edfc36-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "c8f33da3-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439580, "uuid": "c8fd245e-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439633, "uuid": "e8f589c8-3a71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.75.111:55169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439749, "uuid": "2e1577fd-3a72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://music-radio4.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776439870, "uuid": "75bc6ad8-3a72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.239.240:48753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776440112, "uuid": "066a0b06-3a73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.65.159.56:52425/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776440169, "uuid": "284b3024-3a73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://video-screen5.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776440710, "uuid": "6ac6b7ac-3a74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://power-cable6.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776440776, "uuid": "9227cb25-3a74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.239.240:48753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776440898, "uuid": "da9f6be7-3a74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.237.166:44860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776441021, "uuid": "23d61455-3a75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.127.186:54786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776441139, "uuid": "6aa4bf49-3a75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.233.4.0:15391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776442933, "uuid": "97ecdb5e-3a79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://daily-plan1.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776443119, "uuid": "06918439-3a7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://work-task2.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776443247, "uuid": "530662f3-3a7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.189.145:35513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776443718, "uuid": "6b5ebcec-3a7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meet-time3.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776443955, "uuid": "f8fc1c33-3a7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://call-back4.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776444021, "uuid": "203b532d-3a7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.189.145:35513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776444315, "uuid": "cfa9c0ef-3a7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://send-mail5.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776444323, "uuid": "d4062c10-3a7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.115.102.14:33789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776444324, "uuid": "d47b74bb-3a7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.238.15:46035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776444855, "uuid": "1112dae6-3a7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-save6.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776445223, "uuid": "ec9ac999-3a7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.174.171.155:41130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776445269, "uuid": "08182126-3a7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://summer-trip1.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776445685, "uuid": "0038c1a5-3a80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8717422379/HLSs5Qb.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776445756, "uuid": "2a8761af-3a80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://winter-stay2.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776446113, "uuid": "ff1feaa9-3a80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.115.102.14:33789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776446242, "uuid": "4c295ca1-3a81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.238.15:46035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776446243, "uuid": "4c658b7c-3a81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://beach-party3.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776446713, "uuid": "64c0ac31-3a82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ski-resort4.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776446719, "uuid": "682c2cdb-3a82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.126.218:36416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776447371, "uuid": "ed2e5d8e-3a83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://travel-bag5.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776447378, "uuid": "f14d174f-3a83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.58.210.243:48989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776447386, "uuid": "f5bd824c-3a83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.142.223:35382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776447608, "uuid": "7a7223fb-3a84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://world-tour6.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776447981, "uuid": "58bfbabe-3a85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.221.95:43671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448030, "uuid": "75c9422d-3a85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://team-spirit1.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448160, "uuid": "c30d8f5d-3a85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.126.218:36416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448690, "uuid": "fef7bb78-3a86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.198.222:51903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448755, "uuid": "25cef28c-3a87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://work-group2.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448932, "uuid": "8f23b73d-3a87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://staff-room3.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776448940, "uuid": "9422452a-3a87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.58.210.243:48989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776449468, "uuid": "ceeb3006-3a88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://office-desk4.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776449717, "uuid": "63733189-3a89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.221.130:41284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776449888, "uuid": "c8e709b7-3a89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunch-break5.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776450368, "uuid": "e72eb460-3a8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://job-offer6.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776450792, "uuid": "e3c9f324-3a8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-sky1.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776450977, "uuid": "524e11e6-3a8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.142.223:35382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451030, "uuid": "719300a2-3a8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://overly.dinergysolutions.org/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451038, "uuid": "76bbd1d8-3a8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.221.130:41284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451266, "uuid": "fe61fdaa-3a8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://red-rose2.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451267, "uuid": "feda3a70-3a8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://krikadoo.com/wordpress/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451278, "uuid": "05ec345d-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.116.196:40715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451328, "uuid": "235b0fd0-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault88x.secure-efficient2.su/img_151624.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451332, "uuid": "25ed0e66-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault88x.secure-efficient2.su/MSI_133213.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451567, "uuid": "b1c50cb0-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://officials.ink/image.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451573, "uuid": "b5a0ff67-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://banglabillboard.com/assets/images/knSkgpc.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451690, "uuid": "fb382037-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-leaf3.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "ff2eb462-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "ff2edb1f-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "ff30969f-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "ff372f3c-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "ff373cfb-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "ff375099-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "ff3b6a38-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "ff407eac-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451697, "uuid": "ff44a2f4-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "0066386f-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "006ad7d2-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "0070e2ac-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnarmv7lxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "007cff86-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451699, "uuid": "008c6a5d-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.203/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451873, "uuid": "6819d165-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sfunited.club/rrliha.vmp.msi", "Tag": [ { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451931, "uuid": "8aa26c13-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://genghis.yzz.me/MSI_095825.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451987, "uuid": "ac82135a-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.30/12/metrokingsformebetter.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776451988, "uuid": "acb605e8-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.30/12/img_175349.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452168, "uuid": "1861bf80-3a8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yellow-sun4.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452420, "uuid": "ae3ce67e-3a8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.8.35:38376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452475, "uuid": "cf67a1b4-3a8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-9c47b1bd45604a82bb27d7c7000ef589.r2.dev/preeuy.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452529, "uuid": "ef560e44-3a8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-78a0a6b6bcb04ed486fae205ee734af2.r2.dev/quxera.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452601, "uuid": "19f4ab2a-3a90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://screenshot.finance/MSI_131810.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452648, "uuid": "36455213-3a90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.238.189.239/img/optimized_MSI.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452650, "uuid": "372f7081-3a90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-cloud5.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452660, "uuid": "3d5eafd8-3a90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.76/89/img_211914.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452786, "uuid": "88860fa6-3a90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.116.196:40715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452888, "uuid": "c58a1425-3a90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault88x.secure-efficient2.su/img_071936.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776452951, "uuid": "eabf4da5-3a90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/mNnljRzR/raw", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453028, "uuid": "187fe117-3a91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://banglabillboard.com/assets/images/frostcoder.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453126, "uuid": "53538ab4-3a91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://purple-rain6.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453545, "uuid": "4d13358d-3a92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1XftElet35rssC0Cgx-rhXeVRnzdYFbzj", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453550, "uuid": "500e597c-3a92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1TbkfEq5rysNx_UDp-RONCcH_h3MboK7E", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453552, "uuid": "50dafc6a-3a92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-track1.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453612, "uuid": "74c9e436-3a92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.95.54/wem/fmhdAkc.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453968, "uuid": "4948fc13-3a93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://slow-walk2.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453971, "uuid": "4a8c5e76-3a93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=17YjPoBo5JPv0meXJKqqFpi8wUvuGP9jo", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776453975, "uuid": "4d229af7-3a93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1SKZ87dlJWm7OLk5LJ85pxGqHPJmYtPJA", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454043, "uuid": "759d1d23-3a93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.253.126:60563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454269, "uuid": "fc92d373-3a93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mailshare.it/newuismart/download?uid=@1.aWpTRmtHa1JGQ3NxTjI5MGdvakVwV1pacnRtQml1STFyQ1dneUV1L2hWOHNUZkVjeVZKL1ZiZzYxNGlBc2p6Rw==", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454326, "uuid": "1e35a332-3a94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.vame.be/csi/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454450, "uuid": "6866cd06-3a94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://long-road3.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454511, "uuid": "8ccd2720-3a94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://walnuthillcounseling.com/wp-admin/network/wp-includes/pol/assets/css/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454513, "uuid": "8e087f1a-3a94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://banglabillboard.com/assets/images/iFmkhdg.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454577, "uuid": "b3eabd80-3a94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.116.164:57651/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454687, "uuid": "f56a5840-3a94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://ministrew.info/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776454929, "uuid": "859eebad-3a95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://short-cut4.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455108, "uuid": "f03a37ae-3a95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-f629f9eff5c742ab9493f73c421a617a.r2.dev/Installer.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cac0753-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cae6d22-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5///arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cae6f01-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hik/h.5mra", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cae7390-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cae8051-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cae8a12-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/octagon", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cae93e3-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cafe080-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/ohshith.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb14e2f-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb15101-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb310ca-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hik/h.cra", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb3d20c-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/triangle", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb3ec7b-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hik/h.46_68x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb3f6f8-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hik/h.686i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb3f78d-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hexagon", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb3fcc2-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hik/h.lspm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb45648-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hik/h.craps", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb546f3-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/heptagon", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb5485d-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/circle", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cb94c82-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/square", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cbbce75-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455236, "uuid": "3cc3dc2e-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5d9ff1fd-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/pentagon", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5da21f10-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5da45cf5-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hik/h.mra", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5da6a776-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hik/h.4hs", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5da6b802-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5da891dc-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hik/h.7mra", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5da8a400-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hik/h.spim", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5dcab2c8-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5dda1b2e-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/star", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5ddafe2c-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/hik/h.685i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5ddb0321-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/diamond", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455291, "uuid": "5ddfb7ca-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/rhombus", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455347, "uuid": "7ec92509-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.shcgroup-vn.com/image.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455349, "uuid": "8042fcaf-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hard-work5.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455408, "uuid": "a37a6a10-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://allsydevs.com/wp-admin/image.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455465, "uuid": "c57de07e-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zorvex.life/Ao/images.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455528, "uuid": "ead61dcf-3a96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://corwineagles.com/desk.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455587, "uuid": "0dfd43e9-3a97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solar-sanat.net/imagedan73.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455651, "uuid": "341440f0-3a97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.vame.be/cup/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455777, "uuid": "7f34ad0f-3a97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.234.58:56046/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455887, "uuid": "c0c22a4e-3a97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://easy-life6.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776455957, "uuid": "eabdb1ab-3a97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.253.126:60563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776456312, "uuid": "be453943-3a98-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776456429, "uuid": "03bbcddb-3a99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.221.151:55074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776456669, "uuid": "92e5ba3f-3a99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.44:46312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776456907, "uuid": "2105a2ce-3a9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://44kg.rav2piren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776456910, "uuid": "229ec40d-3a9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://50.83.204.239:26166/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776456923, "uuid": "2a48f56d-3a9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.101/arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c1c8ed-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c1f472-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/cat.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c1f4b9-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c1f562-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c2946e-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c29bdc-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c2a310-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c2ab0e-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c2afee-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c2babc-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c32245-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c3377b-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c33ef2-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c86436-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c86e31-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0c8b6ad-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.apk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457632, "uuid": "d0d4cc3d-3a9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.253:1212/zyre.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457813, "uuid": "3ce29b67-3a9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://a4lp.tov4mixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776457877, "uuid": "62c0cd20-3a9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.251.86:44369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776459019, "uuid": "0bbdd526-3a9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.58.251:60744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776459614, "uuid": "6e91af41-3aa0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clipvale.dex9taren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776459861, "uuid": "01b1a392-3aa1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.56.212:33306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776460101, "uuid": "9074fdfe-3aa1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.158.39.24:44054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776461296, "uuid": "58f76675-3aa4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.138.70:41218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776461297, "uuid": "5941843a-3aa4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.138.70:41218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776461298, "uuid": "5a3de76e-3aa4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.145.57:41209/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776461414, "uuid": "9f5a7c02-3aa4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spark0-mesh.nuv2moren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776461469, "uuid": "c003aef7-3aa4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.251.86:44369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776461590, "uuid": "083d38d1-3aa5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.162:56321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776461782, "uuid": "7a880840-3aa5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.158.39.24:44054/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776461827, "uuid": "95259892-3aa5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gzvsfzls.vym7lixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776461951, "uuid": "df48be5d-3aa5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.120.16:48949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776462308, "uuid": "b434861f-3aa6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3qui-crest.tav4sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776462496, "uuid": "241df4f3-3aa7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.253.120:48853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776462727, "uuid": "ae10f8a1-3aa7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wolfcoupo.kiv6darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776462978, "uuid": "439bf7c5-3aa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.162:56321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776463210, "uuid": "cdb680e7-3aa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://daily-health1.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776463512, "uuid": "81de9835-3aa9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yoga-class2.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776464047, "uuid": "c0707bd3-3aaa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-juice3.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776464237, "uuid": "318a82ac-3aab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.253.120:48853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776464468, "uuid": "bbc366c1-3aab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://power-gym4.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776464664, "uuid": "306e3038-3aac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.29.136:57794/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776464953, "uuid": "dc5359c6-3aac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://body-fit5.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776465198, "uuid": "6ed957be-3aad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.145.57:41209/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776465432, "uuid": "fa153ab9-3aad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://strong-mind6.3lomaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776465853, "uuid": "f4cb7b75-3aae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-match1.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776465920, "uuid": "1cf7de17-3aaf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.146.119:50655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776465920, "uuid": "1d18d2c1-3aaf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.254.103:47220/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776466276, "uuid": "f1279851-3aaf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://team-score2.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776466751, "uuid": "0c8110ef-3ab1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-medal3.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776467234, "uuid": "2c064c4f-3ab2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://final-game4.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776467416, "uuid": "989830b9-3ab2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.26.86:49109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776467711, "uuid": "4895fd06-3ab3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sport-news5.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776467768, "uuid": "6a5e8baa-3ab3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.254.103:47220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776467955, "uuid": "d9b1e478-3ab3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.85.86:32974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776468131, "uuid": "42a6351e-3ab4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-player6.ra7vmixel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776468609, "uuid": "5fad5a58-3ab5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bank-report1.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776468797, "uuid": "cf85f18a-3ab5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.146.119:50655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776469034, "uuid": "5cd71187-3ab6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://money-save2.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776469092, "uuid": "7fd1c6ef-3ab6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.54.161.214:49444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776469211, "uuid": "c6c0157e-3ab6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.133.139:41679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776469574, "uuid": "9ea41f6f-3ab7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cash-flow3.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776469819, "uuid": "30dbd83f-3ab8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.85.86:32974/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776470046, "uuid": "b853a0e3-3ab8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://credit-card4.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776470297, "uuid": "4dd5c8d3-3ab9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.29.136:57794/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426064, "uuid": "5100fdf5-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.172.186.155", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776414906, "uuid": "56542d53-3a38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.172.186.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776452645, "uuid": "3452f9c4-3a90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.238.189.239", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776412265, "uuid": "3024656e-3a32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.179.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776433926, "uuid": "9ee368f2-3a64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.135.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776422765, "uuid": "a267f0b0-3a4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.31.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776433985, "uuid": "c239835d-3a64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.220.135.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776464645, "uuid": "24fd06b3-3aac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.220.29.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776422526, "uuid": "1418c978-3a4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.220.58.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776431225, "uuid": "5562e9b5-3a5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.113.204.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426244, "uuid": "bc659861-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.99.220", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426008, "uuid": "2f5166a0-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.227.107", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426125, "uuid": "75154fdb-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.128.64.41", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426185, "uuid": "9923a765-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.101.224", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426125, "uuid": "75114848-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.217.13", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776447365, "uuid": "e9641e64-3a83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.58.210.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426306, "uuid": "e10bd919-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.139.213.64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425945, "uuid": "09fbeffb-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.83.46", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426306, "uuid": "e10fb58b-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.225.75", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776420064, "uuid": "58e93abb-3a44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.241.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408126, "uuid": "8cd5496a-3a28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.28.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426244, "uuid": "bc653ab0-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.191.122", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776416585, "uuid": "3f130c06-3a3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.125.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776461285, "uuid": "52416fe9-3aa4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.145.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426008, "uuid": "2f508670-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.48.79", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776459844, "uuid": "f788a465-3aa0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.56.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776459006, "uuid": "03a11551-3a9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.58.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776415384, "uuid": "734e28e4-3a39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.9.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776405064, "uuid": "6bf405df-3a21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.12.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426064, "uuid": "5101b584-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.175.166", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776405665, "uuid": "d2493168-3a22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.34.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776387966, "uuid": "9c7e919c-39f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.90.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454024, "uuid": "6a51cf46-3a93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.253.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776389944, "uuid": "37ff8d41-39fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.253.80.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425945, "uuid": "09fb9309-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.119.164.207", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426185, "uuid": "99263388-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.150.107.222", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426125, "uuid": "75119ec1-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.244.223.22", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776461285, "uuid": "52416110-3aa4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.138.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406206, "uuid": "1471da82-3a24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.230.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776403985, "uuid": "e8a8df83-3a1e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.78.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776407466, "uuid": "036c2e07-3a27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.135.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426364, "uuid": "03df4528-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.221.192", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776397864, "uuid": "a842b961-3a10-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.169.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776395585, "uuid": "59e80eba-3a0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.24.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423786, "uuid": "0330f094-3a4d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.129.153.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426064, "uuid": "51015c3b-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.119.117", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426306, "uuid": "e10d25cb-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.251.38", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426244, "uuid": "bc654763-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.172.180", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426064, "uuid": "51015a5b-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.83.224", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776429063, "uuid": "4caf68b4-3a59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.8.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426185, "uuid": "9924cd25-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.39.77", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776431464, "uuid": "e3bb8d19-3a5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.10.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427264, "uuid": "1c1a1cdc-3a55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.12.51", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455765, "uuid": "785873b6-3a97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.234.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427264, "uuid": "1c1a2817-3a55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "13.60.36.54", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776399306, "uuid": "03d6d215-3a14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.0.45.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776411126, "uuid": "88f08f13-3a2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.157.83.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453605, "uuid": "70c83dcf-3a92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.95.54", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426788, "uuid": "0031255b-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.210.248", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776434645, "uuid": "4b8be989-3a66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.211.95", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776397326, "uuid": "677ca778-3a0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "167lo.fortene7vous.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776411665, "uuid": "ca997cde-3a30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.212.150.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451985, "uuid": "aae44167-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.245.95.30", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776393724, "uuid": "04f039c0-3a07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.107.205.156", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426008, "uuid": "2f5149c5-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.159.211", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425945, "uuid": "09fbced4-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.206.118", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426064, "uuid": "5100b92b-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.94.220", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444307, "uuid": "ca5e1d9c-3a7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.238.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776456306, "uuid": "ba60d170-3a98-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.253", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439507, "uuid": "9de121ff-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.173", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426306, "uuid": "e1104785-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.42.111.45", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776418807, "uuid": "6bb29f6a-3a41-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.150.21.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426244, "uuid": "bc6542f3-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.157.47.152", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776460084, "uuid": "86b7f3f9-3aa1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.158.39.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776415324, "uuid": "4fa42398-3a39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.252.211.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439386, "uuid": "552ff396-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.237.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426008, "uuid": "2f52b1e5-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.203.84", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776434045, "uuid": "e61f6f2d-3a64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.33.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426064, "uuid": "5101a395-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.31.202", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776447365, "uuid": "e9641bc8-3a83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.142.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776412324, "uuid": "53900aa6-3a32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.129.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384905, "uuid": "7c8928f8-39f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.211.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391923, "uuid": "d34ffc65-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.127.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426185, "uuid": "9927641f-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.248.72", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427206, "uuid": "f9d92be4-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.241.155.246", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776469084, "uuid": "7b0fcf8d-3ab6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.54.161.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426185, "uuid": "9925700b-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.60.176.21", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425945, "uuid": "09fbe7cf-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.210.18", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426125, "uuid": "7515abba-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.252.99", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776396904, "uuid": "6c496f91-3a0e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.19.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776414005, "uuid": "3d65861b-3a36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.127.169.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776465907, "uuid": "14f033d1-3aaf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.146.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426185, "uuid": "9926dd2f-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.169.136", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776469205, "uuid": "c340fcbb-3ab6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.133.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426306, "uuid": "e10d32c0-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.7.76", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439447, "uuid": "79b8408f-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.227.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776422284, "uuid": "841fb662-3a49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.80.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426125, "uuid": "7511ba60-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.241.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426306, "uuid": "e10daccf-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.219.74.93", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776402307, "uuid": "00a5a39e-3a1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.220.145.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776465907, "uuid": "14f068be-3aaf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.254.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426185, "uuid": "9925d25f-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.246.71", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776396247, "uuid": "e4819c00-3a0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.230.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439865, "uuid": "72c8f96a-3a72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.239.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776461944, "uuid": "db4cdaf7-3aa5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.120.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776398408, "uuid": "ec8b7ac4-3a11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "28mp.chain-sinusit.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427206, "uuid": "f9d86284-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.57.243.129", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776410765, "uuid": "b202d727-3a2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.69.84.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426125, "uuid": "75110cfd-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.232.2", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776395885, "uuid": "0cc815f9-3a0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.64.242.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776419585, "uuid": "3afd4bfd-3a43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.73.15.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426306, "uuid": "e10bc321-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.144.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776394925, "uuid": "d08fd614-3a09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "393llqb.savor-woman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776462306, "uuid": "b2acc739-3aa6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3qui-crest.tav4sorel.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423607, "uuid": "985ba9f8-3a4c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.122.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776446709, "uuid": "623a7e72-3a82-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.126.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776434584, "uuid": "278120eb-3a66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.67.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776405726, "uuid": "f6d67bba-3a22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.39.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408725, "uuid": "f216a487-3a29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.245.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776389826, "uuid": "f152bc83-39fd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.247.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776386824, "uuid": "f42384ba-39f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.18.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423726, "uuid": "df47ac8a-3a4c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.70.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776461585, "uuid": "050978fc-3aa5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.107.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426185, "uuid": "99258c73-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.94.163", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776447964, "uuid": "4e62d715-3a85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.221.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776456425, "uuid": "01b8ba2f-3a99-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.236.221.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426125, "uuid": "7514d741-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.241.151", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426185, "uuid": "992403f4-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.255.218", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451264, "uuid": "fd37d1d0-3a8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.116.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776462485, "uuid": "1d805a88-3aa7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.253.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426185, "uuid": "992670c4-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.247.200", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425945, "uuid": "09fbd49d-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.8.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426244, "uuid": "bc652537-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.33.212", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425584, "uuid": "32f1927d-3a51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.43.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457864, "uuid": "5b756ee2-3a9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.251.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426244, "uuid": "bc63a7e7-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.171.118", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776456905, "uuid": "1f95ea10-3a9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "44kg.rav2piren.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391624, "uuid": "215eb88d-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.9.156.250", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776393306, "uuid": "0b7c747c-3a06-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "491ptjh.multi5ardina.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776456905, "uuid": "1f8d3875-3a9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "50.83.204.239", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776431045, "uuid": "e9b80e3a-3a5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.76.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426963, "uuid": "68fe2ab4-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.49.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776395943, "uuid": "2f851e85-3a0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.222.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427866, "uuid": "82d0b1c5-3a56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.75.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425945, "uuid": "09fbc41c-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.125.53", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776407466, "uuid": "036be1ee-3a27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.89.163.230", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ZigClipper", "colour": "#72f06d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455224, "uuid": "3594c704-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "65.87.7.5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435065, "uuid": "46129b57-3a67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.63.170.76", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776409085, "uuid": "c8842cc9-3a2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.215.159.4", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776431045, "uuid": "e9b825ef-3a5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.241.242", "Tag": [ { "name": "1", "colour": "#1cace5", "exportable": true, "hide_tag": false }, { "name": "B", "colour": "#847a52", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "d", "colour": "#207d31", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776441125, "uuid": "623b8479-3a75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.233.4.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426064, "uuid": "5100f0ac-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "98.167.107.155", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391923, "uuid": "d3580ca8-3a02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9waxfs6b.multi5ardina.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776457808, "uuid": "39b7108d-3a9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "a4lp.tov4mixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776386885, "uuid": "18976747-39f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ae5z56.red-sticker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426788, "uuid": "0030e5f0-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "allplanetssame.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776387544, "uuid": "a18755da-39f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-nirnbl.bo2rdreluct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff4a2a38-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "antongandon.club" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776398646, "uuid": "7abb704c-3a12-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arraynotifier.chain-sinusit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776410767, "uuid": "b34df220-3a2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "auto-parts4.pov4daren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776420247, "uuid": "c5a9224c-3a44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "back-yard2.zav3liten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776431405, "uuid": "c0afe25c-3a5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "baked-pizza4.lom5terax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776433086, "uuid": "aa27b4ed-3a62-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bandgarms.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451568, "uuid": "b2c3cb54-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "banglabillboard.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776468607, "uuid": "5e49b264-3ab5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bank-report1.sylpi6ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776446231, "uuid": "4597e0b6-3a81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beach-party3.nuv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776402731, "uuid": "fd1fb8da-3a1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beach-resort4.rav8doxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426788, "uuid": "00410c17-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beacon-mysummitfcu.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776468124, "uuid": "3e7f4ad2-3ab4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-player6.ra7vmixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423126, "uuid": "79a1b8f5-3a4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-price4.nuv7porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776418868, "uuid": "8fc96d7a-3a41-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-seller4.qim8dorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff48c545-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bestwebchlen.cyou" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426788, "uuid": "00681b84-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bigbadwolf.click" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426787, "uuid": "002760ba-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bigblograin.bond" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff57085c-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bigboysclub.cyou" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426788, "uuid": "003f9b2d-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "biggestchlen.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776404407, "uuid": "e44f11b7-3a1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "black-marker3.syl5peran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff489c41-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blatnoitovar.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff5a28e5-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blobtop.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776450785, "uuid": "dfc77c1a-3a8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-sky1.tav4sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776464950, "uuid": "daab65d9-3aac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "body-fit5.3lomaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776399365, "uuid": "270e786b-3a14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "byteash.chain-sinusit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443951, "uuid": "f69c1430-3a7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "call-back4.dex9taren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776410050, "uuid": "079e2526-3a2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "car-rental1.pov4daren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776469565, "uuid": "997510b4-3ab7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cash-flow3.sylpi6ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776386586, "uuid": "6603be96-39f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "castexport.red-sticker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776411426, "uuid": "3bcc642b-3a30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-park6.pov4daren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776401050, "uuid": "13406126-3a18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "class-report5.mox3terin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406085, "uuid": "cc8ef056-3a23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clean-house2.tov2liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426306, "uuid": "e11c1f2f-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-sky2.tav9dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776459606, "uuid": "698fa586-3aa0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clipvale.dex9taren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff43f3e7-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloudflare-check.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776432724, "uuid": "d2a8ca81-3a61-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-water6.lom5terax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406513, "uuid": "cbe7762c-3a24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "connect.kexlore.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776417487, "uuid": "588a3945-3a3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-drink6.bov1serin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427269, "uuid": "1f5c7ae7-3a55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-wind5.tav9dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776470044, "uuid": "b7447d17-3ab8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "credit-card4.sylpi6ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776388207, "uuid": "2c8750a3-39fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "d43mon-field.bo2rdreluct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776463207, "uuid": "cb9e48f7-3aa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "daily-health1.3lomaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776413885, "uuid": "f5c7da93-3a35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "daily-news1.dex6laper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776442929, "uuid": "95329e89-3a79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "daily-plan1.dex9taren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff524545-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "denegnet.click" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776397625, "uuid": "19e47878-3a10-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "densefro.chain-sinusit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776434945, "uuid": "feab60c4-3a66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "desert-sand5.rav2piren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776405431, "uuid": "468b4684-3a22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "desk-folder6.syl5peran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff52da15-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "diddyparty.click" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776429606, "uuid": "8fffd790-3a5a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "done-task6.kiv5leren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385924, "uuid": "dbef993b-39f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynamicsoun.red-sticker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455885, "uuid": "bfa6baf4-3a97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "easy-life6.kiv6darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776386225, "uuid": "8f4f6495-39f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "echoblend.red-sticker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff40e83f-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "etokrol.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776410225, "uuid": "6ffbd937-3a2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-drive2.pov4daren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776415806, "uuid": "6ecfc636-3a3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-food1.bov1serin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776465851, "uuid": "f39dafb2-3aae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-match1.ra7vmixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776428765, "uuid": "9b1f848b-3a58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-ship3.kiv5leren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453546, "uuid": "4dbb5945-3a92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-track1.kiv6darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776392588, "uuid": "5fb02b6a-3a04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fernretai.multi5ardina.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444853, "uuid": "0fea90ad-3a7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-save6.dex9taren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776467227, "uuid": "281fcdc4-3ab2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "final-game4.ra7vmixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776401409, "uuid": "e94fc627-3a18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "final-grade6.mox3terin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776432910, "uuid": "41aec6f1-3a62-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "forest-walk1.rav2piren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423611, "uuid": "9af5345c-3a4c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "free-card6.nuv7porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776464044, "uuid": "bf0408ca-3aaa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-juice3.3lomaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776417125, "uuid": "80e426b2-3a3d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-juice5.bov1serin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776430085, "uuid": "adcda8fc-3a5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-tomato1.lom5terax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776390006, "uuid": "5cec2877-39fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fsefumza.expans-homeland.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406750, "uuid": "590adfc6-3a25-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "garden-view4.tov2liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776411065, "uuid": "64b22c73-3a2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gas-station5.pov4daren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406569, "uuid": "ecfc6a06-3a24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gemini-console.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451927, "uuid": "88435c08-3a8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "genghis.yzz.me" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776394206, "uuid": "24037a91-3a08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-4uth.savor-woman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776421871, "uuid": "8dca816d-3a48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gift-shop1.nuv7porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438844, "uuid": "12adbc27-3a70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glass-lens2.tov4mixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776405066, "uuid": "6d3ccdfe-3a21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glue-stick5.syl5peran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776466749, "uuid": "0af0d7c1-3ab1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-medal3.ra7vmixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776416165, "uuid": "44c2b2fe-3a3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-meal2.bov1serin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff3fa3d6-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gooddogshop.click" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff4bf1af-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "goodgoodmoon.bond" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451687, "uuid": "f9654657-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-leaf3.tav4sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776430986, "uuid": "c6d3a433-3a5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-salad3.lom5terax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427626, "uuid": "f3fa0c0a-3a55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-tree6.tav9dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776424264, "uuid": "204e9258-3a4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "group-chat2.vym2siren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776421206, "uuid": "016470a2-3a47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "guest-room5.zav3liten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776461825, "uuid": "940be5f9-3aa5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gzvsfzls.vym7lixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455344, "uuid": "7d61767c-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hard-work5.kiv6darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776405727, "uuid": "f70da037-3a22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-service1.tov2liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776431948, "uuid": "03dfcc54-3a60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-coffee5.lom5terax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776415145, "uuid": "e48e8bea-3a38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-topic5.dex6laper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776402006, "uuid": "4d5adb10-3a1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotel-booking2.rav8doxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408067, "uuid": "69a08c22-3a28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "image-zoom2.kym7sarel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406569, "uuid": "ecff15fe-3a24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "install-claude.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776398047, "uuid": "157bec7a-3a11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jhknytxr.chain-sinusit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776450365, "uuid": "e56d2a2b-3a8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "job-offer6.vym7lixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425652, "uuid": "5b4f0094-3a51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "join-list6.vym2siren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776394624, "uuid": "1d479869-3a09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kel-venor.savor-woman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff51760c-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "krempie.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776389586, "uuid": "621c3930-39fd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "labeltheory.expans-homeland.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776434226, "uuid": "521bfd56-3a65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lake-view4.rav2piren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776387246, "uuid": "ef60a5ff-39f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "listeshap.red-sticker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776415507, "uuid": "bc66244e-3a39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "live-stream6.dex6laper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776403448, "uuid": "a8a08f49-3a1d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "local-event6.rav8doxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454447, "uuid": "66c104ab-3a94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "long-road3.kiv6darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776429306, "uuid": "dd913271-3a59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "long-way5.kiv5leren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384250, "uuid": "f5bb4ff3-39f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lummesh8or.dredg8asman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776449885, "uuid": "c7213476-3a89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunch-break5.vym7lixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776428527, "uuid": "0d47cd44-3a58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail-box2.kiv5leren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454267, "uuid": "fb2c1700-3a93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mailshare.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776419825, "uuid": "ca50e1ae-3a43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-hall1.zav3liten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776409445, "uuid": "9f3b74fb-3a2b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "media-player6.kym7sarel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425286, "uuid": "811be90d-3a50-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meet-point5.vym2siren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443711, "uuid": "6789339b-3a7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meet-time3.dex9taren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435849, "uuid": "194e1540-3a69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "merchant-gateway.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff51af9f-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "merengagoi.bond" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff5921b3-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "microblob.bond" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454685, "uuid": "f422723f-3a94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ministrew.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776387907, "uuid": "799165c2-39f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mnwgjp.bo2rdreluct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776469030, "uuid": "5a7c92f8-3ab6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "money-save2.sylpi6ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776433267, "uuid": "1667c5bd-3a63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mountain-top2.rav2piren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff4ee91e-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mrazotalog.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439747, "uuid": "2c7562c4-3a72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "music-radio4.tov4mixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff57c621-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mygoodblog.bond" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff60d372-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mygoodblog.cyou" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426787, "uuid": "002eec0e-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mygoodblog.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff3e39b9-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mymicroblog.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426787, "uuid": "001eb961-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "myverifhouse.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff51d45c-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "myverifyblog.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776419166, "uuid": "4162afcf-3a42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-author5.qim8dorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776393664, "uuid": "e13b8840-3a06-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "norlithix3.savor-woman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435125, "uuid": "69e270f9-3a67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ocean-wave6.rav2piren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776449465, "uuid": "cd1a860b-3a88-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "office-desk4.vym7lixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776424930, "uuid": "acc8e43e-3a4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "office-hour4.vym2siren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776403688, "uuid": "380c1c05-3a1e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "office-paper1.syl5peran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451564, "uuid": "b025a0b5-3a8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "officials.ink" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776419587, "uuid": "3c47b0fd-3a43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "old-library6.qim8dorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400390, "uuid": "8a47f5a0-3a16-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "online-course3.mox3terin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776417785, "uuid": "0a239ee0-3a3f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-book1.qim8dorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776433145, "uuid": "cdc4ae16-3a62-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "overly.dinergysolutions.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776392943, "uuid": "333ae1d3-3a05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pa5tu-drive.multi5ardina.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776428947, "uuid": "076f438b-3a59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pack-unit4.kiv5leren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776418565, "uuid": "db64752c-3a40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "page-number3.qim8dorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385205, "uuid": "2f59230b-39f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "peakree.dredg8asman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776404046, "uuid": "0d3a8921-3a1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pencil-case2.syl5peran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776439266, "uuid": "0df7546d-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "photo-camera3.tov4mixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776407708, "uuid": "9426ae3a-3a27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "photo-frame1.kym7sarel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408430, "uuid": "4228f5fe-3a29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "picture-book3.kym7sarel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776427925, "uuid": "a617b9ae-3a56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "post-card1.kiv5leren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776440706, "uuid": "68188a0a-3a74-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "power-cable6.tov4mixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776464466, "uuid": "ba184f93-3aab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "power-gym4.3lomaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426787, "uuid": "ffcecd88-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "productionmaza.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff6e1938-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "productionmaza.cyou" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff4b925f-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "productionmaza.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776422531, "uuid": "1755dc66-3a4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "promo-code3.nuv7porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776452527, "uuid": "ee2db4c4-3a8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-78a0a6b6bcb04ed486fae205ee734af2.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776452467, "uuid": "ca776c36-3a8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-9c47b1bd45604a82bb27d7c7000ef589.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455107, "uuid": "efd1fbcc-3a95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-f629f9eff5c742ab9493f73c421a617a.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776399669, "uuid": "dc298ec0-3a14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "public-lesson1.mox3terin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776425947, "uuid": "0b7931e4-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pure-water1.tav9dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453124, "uuid": "52141137-3a91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "purple-rain6.tav4sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776396964, "uuid": "902f8223-3a0e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qpp9.fortene7vous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776399063, "uuid": "7334b74d-3a13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qu4nt-panel.chain-sinusit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776418145, "uuid": "e0df64f8-3a3f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "read-more2.qim8dorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776451264, "uuid": "fd42cfb8-3a8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "red-rose2.tav4sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776406451, "uuid": "a6ce1c6f-3a24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "repair-work3.tov2liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776433746, "uuid": "33c260d9-3a64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "river-bank3.rav2piren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776410471, "uuid": "02bfd7d4-3a2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "road-trip3.pov4daren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384846, "uuid": "58dc7a00-39f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "roughengine.dredg8asman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776388565, "uuid": "01c4bf82-39fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rtrr.bo2rdreluct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776421566, "uuid": "d826e293-3a47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "safe-place6.zav3liten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776394445, "uuid": "b2432b3c-3a08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scalesign.savor-woman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776452585, "uuid": "10e3e097-3a90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "screenshot.finance" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776444312, "uuid": "cd9d6873-3a7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "send-mail5.dex9taren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776392285, "uuid": "ab0ab328-3a03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sharpsummit.multi5ardina.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454927, "uuid": "849e8ed1-3a95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "short-cut4.kiv6darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776420850, "uuid": "2d7583ba-3a46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "side-door4.zav3liten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426786, "uuid": "ff5e8203-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sirata.asia" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391564, "uuid": "fd39e297-3a01-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sketc-gate.multi5ardina.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776446709, "uuid": "6242d1b0-3a82-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ski-resort4.nuv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776453967, "uuid": "4830fc8f-3a93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "slow-walk2.kiv6darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776407411, "uuid": "e29f6379-3a26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-door6.tov2liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776438546, "uuid": "610ea289-3a6f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-watch1.tov4mixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776396010, "uuid": "578d91b4-3a0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-cov.fortene7vous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426550, "uuid": "72e992ba-3a53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-rain3.tav9dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776390607, "uuid": "c2eae15b-39ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solcore0ix.expans-homeland.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776389285, "uuid": "aefa9c2d-39fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solcorear.bo2rdreluct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776409090, "uuid": "cbc26aa7-3a2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sound-track5.kym7sarel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776461411, "uuid": "9d6dd21e-3aa4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spark0-mesh.nuv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776395587, "uuid": "5b326629-3a0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spedus.fortene7vous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776414607, "uuid": "a3ed34fc-3a37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sport-match3.dex6laper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776467709, "uuid": "472da1dd-3ab3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sport-news5.ra7vmixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776424631, "uuid": "fabac474-3a4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "staff-only3.vym2siren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448925, "uuid": "8b332d02-3a87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "staff-room3.vym7lixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776396307, "uuid": "08ae9701-3a0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-ring.fortene7vous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423312, "uuid": "e89fc7b6-3a4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stock-item5.nuv7porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776465429, "uuid": "f8441f08-3aad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "strong-mind6.3lomaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400032, "uuid": "b4b1c7e4-3a15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "student-form2.mox3terin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776400687, "uuid": "3b0690c0-3a17-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "study-material4.mox3terin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776445265, "uuid": "05d06b86-3a7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "summer-trip1.nuv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776422226, "uuid": "615d2dcc-3a49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "super-sale2.nuv7porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776416885, "uuid": "f19c1617-3a3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-cake4.bov1serin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776430563, "uuid": "cad96cbc-3a5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-potato2.lom5terax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776416465, "uuid": "f79eee43-3a3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-dish3.bov1serin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776466271, "uuid": "edfc4ac8-3aaf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "team-score2.ra7vmixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448026, "uuid": "738e7c42-3a85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "team-spirit1.vym7lixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776423850, "uuid": "295b6864-3a4d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "team-work1.vym2siren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776422952, "uuid": "1202ca8b-3a4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thecowardlydog.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776420546, "uuid": "77b1593d-3a45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-floor3.zav3liten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776396608, "uuid": "bbe69e40-3a0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "torr3nt-layer.fortene7vous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776402373, "uuid": "2837290c-3a1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tourist-map3.rav8doxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776447365, "uuid": "e973e151-3a83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "travel-bag5.nuv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776401651, "uuid": "79bcdabb-3a19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "travel-guide1.rav8doxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776403090, "uuid": "d3506db3-3a1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trip-advisor5.rav8doxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776384545, "uuid": "a5c1c9bd-39f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "valu-span.dredg8asman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776385566, "uuid": "062b83a9-39f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vaq4sdju.red-sticker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776390244, "uuid": "ead9d25a-39fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velspire3on.expans-homeland.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776391326, "uuid": "6fb20710-3a01-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velvenor9.expans-homeland.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776408725, "uuid": "f224095e-3a29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "video-clip4.kym7sarel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776440164, "uuid": "25431590-3a73-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "video-screen5.tov4mixel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776395285, "uuid": "a6f7da2f-3a0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vvood-forge.savor-woman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776435424, "uuid": "1c3c4c0f-3a68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vxugfeari7.ufs.sh" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776454508, "uuid": "8acc9a09-3a94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "walnuthillcounseling.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776426969, "uuid": "6c3f3ddb-3a54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-sun4.tav9dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776407112, "uuid": "307cefb5-3a26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "water-pipe5.tov2liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776414785, "uuid": "0e3a25ea-3a38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "weather-post4.dex6laper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776404769, "uuid": "bc3c3044-3a20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-board4.syl5peran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776452645, "uuid": "345a81ce-3a90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-cloud5.tav4sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776445747, "uuid": "24e3c7c8-3a80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "winter-stay2.nuv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776462725, "uuid": "ac710c20-3aa7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wolfcoupo.kiv6darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776448751, "uuid": "233e092d-3a87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "work-group2.vym7lixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776443115, "uuid": "04625330-3a7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "work-task2.dex9taren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776414425, "uuid": "3792fcd4-3a37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "world-press2.dex6laper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776447607, "uuid": "79613b7a-3a84-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "world-tour6.nuv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776455345, "uuid": "7d85ef0f-3a96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.shcgroup-vn.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776452165, "uuid": "163c652b-3a8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yellow-sun4.tav4sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776463505, "uuid": "7dbaded6-3aa9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yoga-class2.3lomaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776388926, "uuid": "d9115bc3-39fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zen-nexos.bo2rdreluct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776390907, "uuid": "75d1fe74-3a00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zme1roui.expans-homeland.in.net" } ] } }