{ "Event": { "published": true, "date": "2024-03-31", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2024-03-31", "timestamp": 1711929781, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "1cbe28cf-9d42-4ba8-8213-b144eff31404", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83ae7f3c-ef29-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711867207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867207, "uuid": "b96e93e5-3292-4a74-b7be-abde74e2022e", "comment": "Malware payload (Gafgyt)", "value": "7c9022960554e5a116eb29ae20cff194", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867207, "uuid": "ec9896ac-a198-465f-8330-6e2d58008226", "comment": "Malware payload (Gafgyt)", "value": "00f31f3727a7ec7db813787ec7aa19f3605d4705e7737ed035b2f8566f31d901", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867207, "uuid": "8f2b23ed-bee1-4e85-8063-b73f48c4894b", "comment": "Malware payload (Gafgyt)", "value": "8033148c58544adb7cc5d2d1bd77ffa44be14fa5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867207, "uuid": "b8de74c2-8542-49dc-88d0-45b3d355b105", "comment": "Malware payload (Gafgyt)", "value": "edc5c9024ea261e8482069daa8b97d56e5540483f2e715ca93314f7908493b968d163339d582a7dc03639963311840d5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867207, "uuid": "3a4d0487-ac42-48b3-a160-32fd09c015a8", "value": "T13A244C24E5404B57C2E323F9AA8E428E3B3247E573D773154A389BB43FC2B9A1D71925", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867207, "uuid": "d0c2bc6c-290d-4a10-bb5c-29e9ffdb0210", "value": "6144:FZzyacCwXJ4DbpW0v25hbL6+uM/9Ocgym0wfB5RyAn:FZzyacCwXJ4gt5hbvf/dgym0mB5RyAn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867207, "uuid": "722cc6fc-1c5b-43d4-9b1b-3f204888c731", "value": 209606, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867207, "uuid": "8b48eab8-9590-4dec-b443-f49a91c0617f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867207, "uuid": "24d0d197-fd29-4f3f-b941-02c4fe37519b", "value": "7c9022960554e5a116eb29ae20cff194", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49aa3c76-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867539, "uuid": "4bf2eb63-80af-4e12-97b3-55ce272f0a56", "comment": "Malware payload (Mirai)", "value": "f327086f96e9eb70f9c33c0128c07b58", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867539, "uuid": "6abf2405-3675-4b1e-8599-4f2ff29df6d6", "comment": "Malware payload (Mirai)", "value": "019594320a888c9ed59737c2466a943b8d15d9d7c0166e707f099d5cd1ac374e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867539, "uuid": "40faf193-50d9-4d9d-a052-3b75fae3c1b6", "comment": "Malware payload (Mirai)", "value": "0a97675045e9a7c68470249b1192ab20baa3107d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867539, "uuid": "cb810665-bf5f-4d03-b647-33d7e71b0e8b", "comment": "Malware payload (Mirai)", "value": "dc4fc74ef1f8bf8a5a0e4819a5559994be06fae4d1269b83d6a4b13645977bba0f800f6cbc1ed9a34bec558ab019befd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867539, "uuid": "90cbfa00-ace6-4374-a81e-71c77b599a26", "value": "T1CDE35C46E6418A13C4D61779BAEF42453323A764D3DB73068928BFF43F86B9E0E27605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867539, "uuid": "97003827-561d-43f5-ba7e-5d46e8a53e39", "value": "3072:dQjvnjBCa/D8ZuccRnoWnb5ocYKKTQupM/9AeW:dQj/9Ca/D8ZuccRoW6TKKMcM/9tW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867539, "uuid": "b2a643cd-7110-4c14-a02e-906d5e7f91b6", "value": 151027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867539, "uuid": "16954db9-6612-4cdf-8d62-fc024e4779a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867539, "uuid": "7614ceca-8a4c-4ae1-be7b-d356b25cab5d", "value": "f327086f96e9eb70f9c33c0128c07b58", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61916c9a-ef05-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711851688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851688, "uuid": "52f94d50-05fb-4886-b13b-b14f9835ffbf", "comment": "Malware payload (Mirai)", "value": "5096bea0badb422849e9306cf9a8da9c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851688, "uuid": "86f9b312-183a-417c-894d-da486365102c", "comment": "Malware payload (Mirai)", "value": "03a236d2edf54ccc11d7adec65dd02c3ee4d7dff6226ceb83c5b9be4472939f3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851688, "uuid": "ad2e59a4-6c08-4bf8-8f80-fa10104f4288", "comment": "Malware payload (Mirai)", "value": "770afbd27b0062f0587f70a4c5363a28e6a54063", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851688, "uuid": "4da0ce78-71f4-45ca-89ce-2860ef95cc8c", "comment": "Malware payload (Mirai)", "value": "2e135328424eca42e18c0627dddfc0e5d6b6b2b8822f702841167a92094c998c016d4a267f569eabf31a091ee715c674", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851688, "uuid": "923509c3-1a57-4343-9341-e7dbf5d95f30", "value": "T18A45125275C2DDB1DA92547066098BB2CB73F332035684D3A7B01E9EDE352E29B37389", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851688, "uuid": "efedc210-797e-4d92-99dc-ec8471ed2b09", "value": "a2811931084b6dcda3f7edcb0d2009ac", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851688, "uuid": "c33415ba-eff5-4e24-a098-0d4eb31738ab", "value": "24576:chEbagUZYxiornbB2RXoBn7DNXSBDCCdMUQMMn5STkhC+:KEbnxiornbsRXoZNSBDAUQZ5TR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711851688, "uuid": "69a59d40-511c-4e61-bab0-0d8de39508ab", "value": 1212560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711851688, "uuid": "72289855-8661-45b9-9c70-83ea0b619679", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851688, "uuid": "6a1c9100-aa64-4383-996b-1c3d0e601676", "value": "SecuriteInfo.com.Trojan.Siggen10.59370.11705.17039", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2f389ff-ef01-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711850187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711850187, "uuid": "f18631ee-e7f9-4d52-8603-4f3c03d9c591", "comment": "Malware payload", "value": "8d05748aeec83a82a2121ca209918918", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711850187, "uuid": "38e6d3f7-4e1f-454d-879b-cef3c2e68cfa", "comment": "Malware payload", "value": "06498e55c3f35a7559e7a8489e84dc803091e4af74142763619c69e4498a891c", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711850187, "uuid": "dc06bc05-977f-41ff-9405-b97471c72516", "comment": "Malware payload", "value": "5076828e67146ca878d2f2d2abb411d4e58a646d", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711850187, "uuid": "e7eda398-f4e1-4ea3-a5fe-e01d19d047cf", "comment": "Malware payload", "value": "2805a9f5aa3702ca61d34385a54eba3c30746508ccf6192cfc155cc27f8b1d5d8f9bc34d40c0f844584e679e8493e18b", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711850187, "uuid": "b83f27cb-2f49-4e90-9ea8-a6810fc11ad8", "value": "T14556F1DAF7D8592FC8B715B2CDB692F116564C0286839F476A48330C78776E80F89BD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711850187, "uuid": "8380ca0e-66ab-42a5-ba46-39b0b9d5ac7a", "value": "98304:1GMkHaAZmsaUcDeoDfSAYHc7NHGCuy3HfhCRo3iIO9tqX/jJV5mAPFTwrz7SM:1GPtZeeoeNmNmy3/hCP98rE/SM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711850187, "uuid": "59340ab3-82b7-4f2d-8dcd-20a47abae9f2", "value": 6399739, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711850187, "uuid": "60dfe190-d56c-4131-a43e-c223f7679df6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711850187, "uuid": "b36e5207-1786-4955-8c81-82fe9c245f8f", "value": "app-regular-release.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c3ab795-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868027, "uuid": "062e7d2f-710a-4439-a048-a25ac1241783", "comment": "Malware payload (Mirai)", "value": "2e21bda9a26ef952e61686edea7d0c46", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868027, "uuid": "30b26bc7-3ec3-4554-adc0-bb7759fc9f9f", "comment": "Malware payload (Mirai)", "value": "076672f4a9ac54bdd63d0c34c625bb94234c929275bf243898d1b503a9e359d4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868027, "uuid": "b1129ecf-8bbf-4c1d-acf7-5d7796176a04", "comment": "Malware payload (Mirai)", "value": "6d278d4baeb9efa238b8906752f418682cb81dd1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868027, "uuid": "a733b14f-dc72-417e-84b5-14b22140b1f9", "comment": "Malware payload (Mirai)", "value": "f4169f6d5e5ff2a074ee09738c54b9879295b1cd74299c7f7ea9fc88441e91a7ce9f6b74068536f51abd79c3d602bd09", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868027, "uuid": "77f1732f-37ea-4c0f-b52f-c0fe5c9cc494", "value": "T14A142A46E6418B13C0D727BAFADF42453333A79893E773069528AFB43F8679A4E23505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868027, "uuid": "db4da680-294e-4f1c-8bd5-d7171c269ce6", "value": "6144:XTfo6lgEAa1e5+kM/3Y5CNb4reX4M/R6ZxxD:XTfxgEAa1e5+kMPSY5Xt/0HxD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868027, "uuid": "337bb029-21fa-43e6-8628-0db8837dc4a6", "value": 201270, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868027, "uuid": "6d943d9a-83a2-403e-8cf4-87ed1fb6ab9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868027, "uuid": "47b9e4b5-4352-4cce-9c11-6ae6c443fc4b", "value": "2e21bda9a26ef952e61686edea7d0c46", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "587e894d-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867564, "uuid": "bbb2d597-a133-4462-8aa9-dcb021bf78ed", "comment": "Malware payload (Mirai)", "value": "e9eaf49d263f78eb80b035dd1224057a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867564, "uuid": "a0cf19af-e89f-4f57-828f-ea3c04d3b70f", "comment": "Malware payload (Mirai)", "value": "092b3a57ee4ecd64591616da6ce0cfb9f01930dbeb179f05e1dbbdbc918098ac", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867564, "uuid": "51b137bd-c2b5-435c-9ee0-d030e5e9f56d", "comment": "Malware payload (Mirai)", "value": "be9436f868387a0f67c1fd657dea7460eb38c717", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867564, "uuid": "1070f895-0b53-4d2d-a2b5-9c3a80fb88f8", "comment": "Malware payload (Mirai)", "value": "2b6351ce44d4fa19e5b162afd7dbb167f86fcb2666f850a834478b270b0a6074e7aa261d006433b4000eefdf7f4ef42e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867564, "uuid": "d392596f-a2c3-458c-aad7-8466633ed723", "value": "T112B3B44DEA649B29C7E332FFFA5912CE322A0B9CB7EA7011DE310B5137C8E565935121", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867564, "uuid": "0008f644-354c-4704-928f-e1723724078c", "value": "3072:rQDuNo18i4q0PSpVHPjDu7QyBVDXeJ1ax5NK:rN7w06brqQyBVDX+1qNK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867564, "uuid": "84d773d8-515d-4d20-948d-4d097ae3e733", "value": 115944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867564, "uuid": "631bbb64-2725-420e-a167-033f498bba92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867564, "uuid": "49a259b0-95c1-4dbb-8d8a-8dac8820dd23", "value": "e9eaf49d263f78eb80b035dd1224057a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17efbab8-ef4b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711881629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881629, "uuid": "2ae4e1bf-b5b4-489e-9d9a-ad120de5d789", "comment": "Malware payload (Mirai)", "value": "9ebf1dcb55447d8004d083fa8cd05e39", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881629, "uuid": "623ca618-3cfd-434c-aafa-1f505e83f1f9", "comment": "Malware payload (Mirai)", "value": "0c62a4a52b2ca32942344aed84bd01a3a1fcf2fc1e0099b3af330f84f1c27536", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881629, "uuid": "0387fef7-f3bd-4d3e-aba2-d161b6f5b51d", "comment": "Malware payload (Mirai)", "value": "311933d104de67b29959f1c68883d183a152f7d1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881629, "uuid": "fb1887cd-af59-48c6-b3d4-09addfe20e80", "comment": "Malware payload (Mirai)", "value": "5e5363487b731942959d49438e34bee68c15446e267fa9b4acabe5a4c94b0013fb4ed4e6cb7fca1182b1997b512482b5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711881629, "uuid": "385791df-be26-44da-ac34-5946c04a99b8", "value": "T17563950ABF610EFBEC1FDD3709E81B06258C651A21A93F757934C928FA5A54B09E3C74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711881629, "uuid": "55c916fb-bf53-468a-be84-507589c5c0be", "value": "1536:GflW8JT48ItAvGXUpgSsZRN1i11UA+YG:GNW8V48QLXUaKQY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711881629, "uuid": "a9810abe-34ec-4281-9f8d-1552ec692e07", "value": 68432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711881629, "uuid": "e75ecee4-f860-4446-8ba5-e6c4f36c8dc6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711881629, "uuid": "09b3a1b8-141c-4ba6-ace5-660865190dd2", "value": "9ebf1dcb55447d8004d083fa8cd05e39", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79743b6a-eefe-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711848722, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848722, "uuid": "c13ad0c3-b4d1-4bbc-9446-4a15fef634e4", "comment": "Malware payload", "value": "1167763a5b0746f7f3cfc48f90363bdb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848722, "uuid": "7385ba82-6393-4eb9-98ca-97bf845ad20c", "comment": "Malware payload", "value": "0c8440defab0879e1fcf09a6ef18d091de75b3a20b3144ee41ad78bef108686d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848722, "uuid": "43260102-0f47-4d4b-99a0-133016e72535", "comment": "Malware payload", "value": "854ac4cf7db115bf96718af95ac5a4647f53ef2d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848722, "uuid": "c35570bc-5377-4ae6-885f-9d5c397ae921", "comment": "Malware payload", "value": "bd7d5d4a790acb0054db70ad7f8204774ce69eb5d4c379d3f742d5dddb47dd45a5a92ad44e40de2f50ba4982ee1a090d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848722, "uuid": "eabb11cc-1175-479d-8fc1-736f976fb8ad", "value": "T11652D60F671744E9C20AD4B48CFB8B30B932BEB21CE5433D43A4E9360E717919B69E25", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848722, "uuid": "950b2a59-3a4d-420f-ace5-606c365e9b9d", "value": "1e66f1c08e37de0ded768d82387dc73d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848722, "uuid": "aaf3e0d5-840e-43c5-9cf8-932b4a5df9f4", "value": "192:7BE9gAcpbL94R7EloQw4d/fJr73BvBJAH3N/jrwh+c:7BEs70Il9w6HJr1AX5MhT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711848722, "uuid": "7b366799-8d68-49da-8f13-1b29e2b3059f", "value": 14336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711848722, "uuid": "1c2b5843-be86-4e86-97e5-034f1268b747", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848722, "uuid": "60df85e5-d04e-441b-bdd2-68266fde1afe", "value": "SecuriteInfo.com.Trojan.Agent.8548.4408", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f8b85f4-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867549, "uuid": "be3289bd-64d3-4b92-a605-c8446f28702e", "comment": "Malware payload (Mirai)", "value": "e21fe040df420658aee588e4e11008c6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867549, "uuid": "ec1939dd-7420-4504-8950-cb773ff5c753", "comment": "Malware payload (Mirai)", "value": "0e9193c3f6ceb55917264b1aa75be4a563720826152c820c161203ea8f2c0edf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867549, "uuid": "f135fe53-05f7-4c08-b157-6041fc42b5db", "comment": "Malware payload (Mirai)", "value": "43a5e5176cd71a1c89d2dfd31d7173981ce10af6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867549, "uuid": "c4aee52d-8aff-4e99-b025-1c86b9d6bfdf", "comment": "Malware payload (Mirai)", "value": "48b857ad47e4cad1301d3ee3f500b39b7e49ea8179c6de40df121b344d387b98b2b643f5bef40b2c6ad780a844369a50", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867549, "uuid": "6764d8e6-85d0-42c7-97d9-31cc6e8d8467", "value": "T1D513E795FC928A7FC6D0237AB76E6B8C37A163D8C3CF7213992013613A8651F5D22E45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867549, "uuid": "25d7c4e6-4d29-4905-9ea0-a9c3ba9f79fe", "value": "768:IROsuMTWA9IFeR+5MG50i64qLzHn9fjPrlzjDG6HZ5Wod4UZwpiTPBHzbqgtwfPp:IhBIFeR+qG50X9fTrlDG6556pijBHygA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867549, "uuid": "26395ea1-711a-4cf3-b523-0178f73771ef", "value": 43188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867549, "uuid": "e445cac1-13a7-40b1-a1f6-cc0eeaa3ec54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867549, "uuid": "56737c52-48c6-4e30-bc19-3425440bccbe", "value": "e21fe040df420658aee588e4e11008c6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab6bb2b2-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868133, "uuid": "69986167-8ebb-42dc-a505-52be90efcb4f", "comment": "Malware payload (Mirai)", "value": "7b37ecf8ea43feb76b54e2afde555871", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868133, "uuid": "ccb2bbc1-1dc7-4642-bfbd-0409b7627940", "comment": "Malware payload (Mirai)", "value": "10e1589f284dae7c3393a012fb17741437fdcb6a08b85d3f73630d92fe64ab42", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868133, "uuid": "b1b4f9a7-a51d-4069-8573-b67ddf7069dc", "comment": "Malware payload (Mirai)", "value": "a79f4274fba3498e876e9f478f1d37a3d10e7c6f", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868133, "uuid": "380a5396-96b1-4d6c-8e7c-d96159d16fff", "comment": "Malware payload (Mirai)", "value": "dc47f8b1386f4659cb8fa8b98a139618350daf49009418e5b5b1b21c7b6e0d514fe86d2349c8c181c64e7f1830757d5c", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868133, "uuid": "ed984601-4e8b-4c56-b32a-79b8b4c9b018", "value": "T1F3B339376251C97AC08342F526EBD5729C13BDBF0732229A33947D60AF368DA1E99F05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868133, "uuid": "edb49c7c-1f33-4b29-9de4-46f47ae51413", "value": "3072:uirMUYZMo/QJLRZDsqtxqLX5I/uJiouA2yd1m7FnVqfJXoebNb:SKo/O8qtUbKubm7FnVqfJXoebNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868133, "uuid": "51046cc1-1eb2-42a3-b025-aa4515712e2d", "value": 116760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868133, "uuid": "17dcd1f4-33c6-4114-9318-c630f6fddd72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868133, "uuid": "bb0a4625-9397-4a7d-88b6-05a2c54ca147", "value": "7b37ecf8ea43feb76b54e2afde555871", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0bd3aa5-ef31-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711870799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870799, "uuid": "60777a89-8f6d-4c5d-838d-d18a1b924269", "comment": "Malware payload", "value": "2ee84cfcc3797afb0ca991abffab0e91", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870799, "uuid": "b2569f69-0783-4cbb-9cb9-d014d458c190", "comment": "Malware payload", "value": "113b7aff48b582a8b8e6724245c39bc7440ed187463365dfbe1b4ebc5c2adc49", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870799, "uuid": "f647f6fd-0c0a-49c4-bb4c-effa1dc50a3d", "comment": "Malware payload", "value": "7cdd44d7705bd5d6c51e03645b0f563b04cb3ddb", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870799, "uuid": "5c335ade-98d3-47cd-922f-3037e7730244", "comment": "Malware payload", "value": "fbf13d5ade239f0012ec858b20f79c8b2becb10beed26f0aac0a979cdcbd8104851b29bb74bc9ef5ceb77853e8df3540", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870799, "uuid": "3f3a4f98-1e79-4102-ad1f-ed0a761087f6", "value": "T104F53358CDF5EA2FE411ECFD9280C8FD1F44C417CA2D93A57426999B0899882CBD8F96", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870799, "uuid": "0c7adf7c-4285-49e3-8a1c-d9932b8e81eb", "value": "589be695d15ae485345af74a6a05fda6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870799, "uuid": "264b990d-f414-4d54-a7a7-19513f672de2", "value": "49152:ABKTL8/aQ5rs+kbSINyRjZ9wY4m3YSiUFofvYRbQQErY+bwG7QtdBBwas+69C8DS:ABR/aQNkBNtm3TpofQtJ+bJ7+drnmD2v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711870799, "uuid": "36895999-b5f9-4d9c-889b-32ef2f8bd61b", "value": 3491348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711870799, "uuid": "c3892650-d3e0-4b0a-bc3e-05cbfb6a9195", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870799, "uuid": "cfe73509-64a3-42d0-adbd-46e92e3b3454", "value": "2ee84cfcc3797afb0ca991abffab0e91", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ec4c7ee-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867602, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867602, "uuid": "fce7273e-1ed3-4520-9bf5-7cbcb171a62e", "comment": "Malware payload (Mirai)", "value": "1fb3ceb362f1303070659352b3a5670d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867602, "uuid": "d54d5354-87e3-48d4-b771-2dd6afee25e1", "comment": "Malware payload (Mirai)", "value": "130b6dbd28e8ffe3c695bf2bf19e259701f42089b56eb61e588c7a63f01761a3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867602, "uuid": "dae610ff-7a41-4dd8-a940-d89c512dd2ca", "comment": "Malware payload (Mirai)", "value": "4f4f54847abcb381c1b36196d3bab619a1191d56", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867602, "uuid": "61587290-5475-4b8c-877a-4821eddec257", "comment": "Malware payload (Mirai)", "value": "e9de921eec896683ddba2554440a1319f9b3975f3f3d5abbd51c063f5534d3b6aaa8502b4c9fca30f5a564fb69159dbf", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867602, "uuid": "310def37-73b8-4ede-82e3-b4d98d345839", "value": "T1CBE30A56F8819B12D5C111BAFE1E124E37131B7CE2DE7202AD246F747B8A97B0E3B905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867602, "uuid": "fcbc1454-4a52-4e55-abe8-15e090e68bc2", "value": "3072:ZUIK7uNUPMNrbAXx0Kfw0aHI5yjwDCO32ZRpY:ZUrkUuAX2KfFa8nH32ZRi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867602, "uuid": "a8b0d076-ed62-4bc5-b783-e6524b285944", "value": 143292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867602, "uuid": "37eb2a4e-2930-44dd-8ed1-8d75a52bc2b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867602, "uuid": "e10616bb-5d02-4885-98fa-f0f727e08abd", "value": "1fb3ceb362f1303070659352b3a5670d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76f2d0a3-eefe-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711848717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848717, "uuid": "e5390e7a-2a9a-4f0a-90e0-d96ea8ca6877", "comment": "Malware payload", "value": "1e8d04909a7dd42a1e90b97b938c846d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848717, "uuid": "52efcddc-8eee-444e-ada7-20b9cd9f5720", "comment": "Malware payload", "value": "1573a7d59de744b0723e83539ad8dcb9347c89f27a8321ea578c8c0d98f1e2cb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848717, "uuid": "1c573453-86ea-4a44-908b-9310d3bb247b", "comment": "Malware payload", "value": "6b6ea7fb3b40a306810b1dae3c3ba3661c03207f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848717, "uuid": "409b887c-34af-4044-aff2-5e1cd8a67192", "comment": "Malware payload", "value": "0c31bbdd0ca3cf0a85058f8a69942130571d22c79e4e3082764155240f866bd586f56ed3b996befe91d80c0c056bfe46", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848717, "uuid": "24f0720b-f403-4e5d-b4e1-bf6b110bd457", "value": "T16715391BF7A354FDC67AC071469B9372BA30F8294234693E2B55CB351F21E60466EB38", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848717, "uuid": "a3694fe5-b486-4021-87da-76b2a20a5cb1", "value": "5a1b63de0fd2986884895f2d5b6e63a5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848717, "uuid": "694edfb4-6e69-4c00-af0a-422338106838", "value": "12288:E2Ud4JqpXkaF0bhEsPPgN0r9XaTcmYHm:ExCJq6aEVzr9Xaym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711848717, "uuid": "99511291-a519-4fe4-806b-3b6bf0ba43de", "value": 906752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711848717, "uuid": "31586286-12fc-4f57-8509-e9796688327d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848717, "uuid": "5c86a61e-f300-4220-9b05-31a22cfc5f5d", "value": "SecuriteInfo.com.Win64.Malware-gen.16258.24442", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d62da04-ef02-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711850473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711850473, "uuid": "62386618-8d98-42e9-a18a-6913e9d5bd94", "comment": "Malware payload", "value": "332d98aae010edb2b666d3c204cf73da", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711850473, "uuid": "e827da27-c151-45cf-9c9f-2e2075f849dd", "comment": "Malware payload", "value": "178286a19714c7005e68d38cdcaa4d3eea4eabef943c74e8b11b43891cb4fb26", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711850473, "uuid": "0490b3a4-7797-4c88-922f-3c8affef32be", "comment": "Malware payload", "value": "4a734bc6f6ad787bb8f7fe866e0e208a06eff932", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711850473, "uuid": "a6c08467-d2da-4888-8830-7dc5a300b912", "comment": "Malware payload", "value": "e9e98f8307f495c9bdd329d61759deff88aeafcff318a55ecfc30f6583dadeb599eaa8ba6bbf67d9095ae0ce7abf39d0", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711850473, "uuid": "d5d4c07d-5a61-4e81-aa0d-fa4f9900ff6e", "value": "T17CE51203E6668566D8FAC3711774222B20764C104B879B56391C3BFF7A7FAE90F866C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711850473, "uuid": "48de673a-acf8-421e-8e53-374168e25492", "value": "49152:teMH5hHnAG+5hP3o9ZJaINEQ1QsgTVz7Bed6c28fbJ6VyV9s:kMH5dn38P3o97DeZfBed6c7IM2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711850473, "uuid": "315e416d-2871-49e5-bdf2-394fc4d97b61", "value": 3226551, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711850473, "uuid": "85cfe10c-21a5-4932-bae6-ccb7483a8860", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711850473, "uuid": "837840a2-d9b2-416f-90be-b60cdedc7f02", "value": "WiFiService.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26ef1007-ef31-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711870488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870488, "uuid": "a27a7ba8-4587-4b02-9a93-290f4fc64881", "comment": "Malware payload", "value": "e75338a175f80b85cb99b51580451d37", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870488, "uuid": "ac5376f1-2fdb-4a4d-8993-3fbc7945f3ac", "comment": "Malware payload", "value": "1f12f9b84cbc176f6313d69749c69d83ac32b322ce16d4a9a48803a264a8d4dd", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870488, "uuid": "6094883f-941b-4d47-8a4d-9c91d58070d4", "comment": "Malware payload", "value": "71df4194615b0bddf7275a1c6320415ff1fad5d9", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870488, "uuid": "c242436c-b3e9-409e-bc57-3472d928af92", "comment": "Malware payload", "value": "5d7c2b67d553e38c2aa7b17e5275c833f6ada00994c2d572655e5e860532858cfc3a3027d09d4ad33752e454970a653c", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870488, "uuid": "0a6921d6-6d11-4a57-ae87-58c1fa2d74e5", "value": "T113940847AB6595F4CC76C078CAA26623B971781D8334ABDB8B508E531F23BE1D93E710", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870488, "uuid": "c4c90158-6a50-48ce-8cd2-094a774ea6f0", "value": "cc12e3f394a2cfaeb0c35364d40acf00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870488, "uuid": "788e988f-8a05-4c5c-bc40-1a2c8e17bb9d", "value": "6144:66kMYlOIa6VkctankhTl2DGl8HpZRw9wx2UCH:62X8anasZq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711870488, "uuid": "23a62e62-ef3f-47ef-b157-0c5bf5d2876e", "value": 423936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711870488, "uuid": "06276f64-45e1-4347-99d1-7a7d1eb4c5db", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870488, "uuid": "04d65f07-7610-446b-9d7a-7f2ca8068e6a", "value": "e75338a175f80b85cb99b51580451d37", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86fcca55-ef29-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867213, "uuid": "2e15f15d-bcb7-426d-a349-2e60b19c9c2b", "comment": "Malware payload (Mirai)", "value": "e1bf81513c4978da8bff910032ba905e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867213, "uuid": "cc1a2112-56d5-49f5-93f9-e4d143a57151", "comment": "Malware payload (Mirai)", "value": "1ffc3c457eb84aa36cd4bc7f3d0dc9a6b8079d63c2bab03c3a646906152876c0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867213, "uuid": "461a21c7-7c63-4a04-b8d0-26200670eceb", "comment": "Malware payload (Mirai)", "value": "e35b9437874c6c71a5894914cb6bb211a94f6038", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867213, "uuid": "d3c1d1de-1b86-405f-8c51-d1cf7d4892e1", "comment": "Malware payload (Mirai)", "value": "951058920bbc7b9ebbeb2fb554abbf0166b3a9323b1ac4f7e9823d54cb1daff75575d4cb741e3a681f950702affae271", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867213, "uuid": "044f4f72-42ae-454d-b4ba-901e53a8d605", "value": "T127D36B576A4379BCF2A300F8D69367EE2DB319281F5E91F26881913BDB702C94139F90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867213, "uuid": "d9454386-e973-45a4-b79a-62c0385d72b6", "value": "3072:wGWSYYwXrXfIoR10BuFGn2CKyn9kXguVq:FGXj0l2xq2PVq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867213, "uuid": "96deaa23-1e50-4fd6-a0a9-88005e8a43ba", "value": 132660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867213, "uuid": "86569731-bdfd-4caf-8acf-f3235efb43aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867213, "uuid": "48bafa01-067d-4e5a-80ed-c61918b585a3", "value": "e1bf81513c4978da8bff910032ba905e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15a1e28b-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891074, "uuid": "31492378-8139-49a7-b5c1-130706327063", "comment": "Malware payload", "value": "968b51937f7908d0981a4d7af4d41861", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891074, "uuid": "7b663175-076e-48a1-ab0b-0863518622f9", "comment": "Malware payload", "value": "20a6d32f56c9a3e236fae103773c2e3f91b20d76fa08d0c130ca6239625f985a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891074, "uuid": "be570eb5-b89a-4cfd-880f-9f654f0b4859", "comment": "Malware payload", "value": "8f1e8714395e3b4b6f8d324a600d3da7805acd9d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891074, "uuid": "272c5373-24ec-426e-b677-93647aa5b0a3", "comment": "Malware payload", "value": "0f80ddeff973a9d17d0a1679515928108948a65a8640e44f92337a7a06f745c0016f49acca46d03b379db02b0e4a1772", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891074, "uuid": "fa212eb6-ddaa-474b-b1ae-20334b2810fd", "value": "T10EE29213BA409DFBCD0C073781F68A18653786746BA38DE396D8D5781A5E6C02E3FE85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891074, "uuid": "e77a6ecf-dee4-44d1-bf60-71c672f79e9f", "value": "768:WFGWfsMDCCX9i2fpftnnqZXEyo5lH5ngbQwq:bWTDJX9i2fpftnnqqyo5lH5nEq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891074, "uuid": "cde7746c-a781-4797-9158-c7b02581bac1", "value": 32768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891074, "uuid": "8c768bdb-3cc4-4077-8fcf-ffe7bda5ce43", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891074, "uuid": "07164509-0dc7-41be-b800-a9a611f0477e", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105582.10708.3117", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "670cbd8c-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867589, "uuid": "1c198415-b68a-4571-9536-5632ad21fec2", "comment": "Malware payload (Mirai)", "value": "2f2d2d02679f9fe3464ac8a2c5caaaf9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867589, "uuid": "a41c8c9b-1daf-4ad0-9b71-8a355a65b3ec", "comment": "Malware payload (Mirai)", "value": "20b4b16b91c1e17fd72d1c947fec76847aad8d5f0199bc106dd848ef895dbfe3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867589, "uuid": "6c81a006-dfcb-4c1f-9605-11702548eeda", "comment": "Malware payload (Mirai)", "value": "1594534dc7e0f35ae9e8e5a1edc57029761e5e06", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867589, "uuid": "3b3e866e-a698-4427-b9ea-9eca1c1e8926", "comment": "Malware payload (Mirai)", "value": "e0d829d77d9535f0bdc84fdc0663b2dd1ce8e97cb0d99e42c7318674f1ee856c044127e1b0c371873bf6c366e993b605", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867589, "uuid": "f4d6d019-17b4-4b93-a00a-2186006e5768", "value": "T18614D71AAB620FBBD8AFDD3702E90B0639CC555722A43B363674D528F54A50F4AD3C78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867589, "uuid": "7fc5b682-c6e8-46d3-9def-3675ad90429e", "value": "3072:cNYW0dYSB56/UfpwwVSfvjJCnVV4H3NnTj1a:cNYWMB568BwmSfrUoHZT5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867589, "uuid": "b4b4eb53-a97f-4972-98bd-91c10244b6c4", "value": 198684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867589, "uuid": "3aae0999-8653-4691-857a-2c1c48ea9aee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867589, "uuid": "49f634e0-a6a2-43b5-951d-820feaff59f3", "value": "2f2d2d02679f9fe3464ac8a2c5caaaf9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b6b25e8-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867569, "uuid": "3c9d0747-0c07-4ffe-b680-f548336efd66", "comment": "Malware payload (Mirai)", "value": "aa06b1722ab972120d5fcb9a8b63039d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867569, "uuid": "1710f6a6-52b4-4895-bd98-3c0017db0816", "comment": "Malware payload (Mirai)", "value": "213da1461bef6aec9a929ab90737123e559ebd0878484d54bdb78e5d6ec998c5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867569, "uuid": "40cff2bb-2ed1-44d3-8339-cd7d1aaf2d86", "comment": "Malware payload (Mirai)", "value": "65ee2d939ea99dea997ab1a76c6e5c02fb9c17cb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867569, "uuid": "757ae9f5-1e14-4b0d-99df-d5e327a7bd30", "comment": "Malware payload (Mirai)", "value": "0fa2055c9deff955f6a7917fe7668832776f47b45c2a807aedae0cbb7b34eb2abeeff6a31f135cf6ffd77992cb481779", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867569, "uuid": "8dbad10d-d8a6-4305-8825-03f2586b0978", "value": "T186E31930D4504B17C2D213FAA69E825E3F221FA793D733115B38BAB41FE279E1D69924", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867569, "uuid": "d98449ab-6d97-4fe5-a46c-7ed82547ab5b", "value": "3072:Z41HOuaGVV3NfHUOjqylcqCw3jkmhxQwoVZUNu:Ze3aGVVdqylcq1jkmhxQwoVZUNu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867569, "uuid": "75ccd4d2-143a-4682-b33e-1db6297714ed", "value": 143044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867569, "uuid": "b69d0d74-32e0-4b15-9b68-de1e92d7e798", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867569, "uuid": "03cb1ec9-d22d-4823-8f2c-89fbe30e7fb7", "value": "aa06b1722ab972120d5fcb9a8b63039d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "613123a2-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867579, "uuid": "8a700f63-d838-4b82-ad59-7b8ba623aa80", "comment": "Malware payload (Mirai)", "value": "133220e2d35dd6ba8045000a9ca94f62", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867579, "uuid": "77e5b609-93e7-4bc3-9b0e-720d4a90055a", "comment": "Malware payload (Mirai)", "value": "229883254475495b53d939ec2d3c7580c2062d514b1721d50f409238dffbe64f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867579, "uuid": "f018a11b-da4e-4d14-b132-1f528ecfb639", "comment": "Malware payload (Mirai)", "value": "3245b987e53d10dee001c5f0c363722c25ecda38", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867579, "uuid": "0b47431f-f2ba-4a27-b7de-cdb7e9616a4e", "comment": "Malware payload (Mirai)", "value": "612617569a4cee18f971c5912abc05accf43b91b5560be2fb90d1d20c2e647cc6a1109cd0498a76fc6afb90e573862bd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867579, "uuid": "526bae6c-a820-44b2-a323-a7791c8a6601", "value": "T18B736C32BA761D1BC4D4A87A61F74760F2F5535A25ACCA1E3DB20E8EBF3065032536B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867579, "uuid": "69daae5e-99a1-468e-810a-7324f5ec0edf", "value": "1536:yGq6WS2y+O35mxHxdhSllCB1It6/lM5EJt479:9q6H3UvS/CwY/l8EY79", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867579, "uuid": "cd781d5c-df04-44b5-82e1-50e800d626e5", "value": 75304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867579, "uuid": "f88f9c5b-b59f-4999-8da5-4a5aacaf7f3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867579, "uuid": "8a9a6138-f9db-4f40-b4b9-5052c2e574ac", "value": "133220e2d35dd6ba8045000a9ca94f62", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "641d52b2-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867584, "uuid": "89a8e0bd-49e4-44fa-a7c6-4e525374addc", "comment": "Malware payload (Mirai)", "value": "ed9e40f714b47fc6747db7ab0a201698", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867584, "uuid": "203ccebc-ac9b-4cdd-828b-79b86b9bc0a6", "comment": "Malware payload (Mirai)", "value": "2333750991587fe0f0bf40940057b2036b4be2e29e2d1d136b17a4313d2f1917", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867584, "uuid": "55a02747-c0ce-48d9-859d-a013e86a82ea", "comment": "Malware payload (Mirai)", "value": "cec3a15a408d05011a69d5cc5b088d8ee3cf2659", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867584, "uuid": "3fc87967-437a-4f47-8fef-03f263de5e9a", "comment": "Malware payload (Mirai)", "value": "e72d47b36c4fce5b9f54ae1432a8bdea903f81f9cbcda8f347e4a133d2787eea026058e78179fcb87d3f8fcef20c880f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867584, "uuid": "dde4c4ac-33f7-4f64-abce-aa2972032c84", "value": "T107539D77C47A6E84C0494AF4B4748AB45B63F04891832FFE5A95C6BA8087EBCF6053F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867584, "uuid": "a3c6c87d-a596-455e-802d-7d743458a769", "value": "1536:IaDwtTI2a4rtfLNLyGKdU8g1hefeCP5JO:IA72VtfQ5dehefe6O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867584, "uuid": "7b3be637-1048-4f15-8f1d-500cbb627023", "value": 62940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867584, "uuid": "2b4b2c9a-d367-461d-8986-c539db0c1171", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867584, "uuid": "61b5db95-f1da-46a3-a689-9c0969f0d0ee", "value": "ed9e40f714b47fc6747db7ab0a201698", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "616767d5-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891202, "uuid": "c640eb6a-ebc4-4887-b103-ff6b3f13d8c4", "comment": "Malware payload", "value": "ef20edf3b7841ccbeadd8d23540c1b8d", "object_relation": "md5", "Tag": [ { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "serenitytherapy.xyz", "colour": "#E4E0D0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891202, "uuid": "df85133f-99b1-48fa-89dd-b878d641546d", "comment": "Malware payload", "value": "29bea5dba3740fc483fc0e303deb0e47d99e75c603b46080f7966a00d219368e", "object_relation": "sha256", "Tag": [ { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "serenitytherapy.xyz", "colour": "#E4E0D0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891202, "uuid": "4b08e821-0bce-4c51-88a4-02fdb6c77431", "comment": "Malware payload", "value": "de615d6d5dd6b75fa84496cdc9995aced31b61f3", "object_relation": "sha1", "Tag": [ { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "serenitytherapy.xyz", "colour": "#E4E0D0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891202, "uuid": "9d397585-57c9-4d35-867b-597722504a56", "comment": "Malware payload", "value": "e43443fa67375c3eecbcdac9e4fc327589e7be7959dc0b73a82c187197b8accbb41a99fbec2d0d7cd3b69e7d02c481d6", "object_relation": "sha3-384", "Tag": [ { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "serenitytherapy.xyz", "colour": "#E4E0D0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891202, "uuid": "94bfbefe-cf04-49b0-83d3-75c5d07a4fd0", "value": "T1410833DC5FD0BD82E4EC7BB85E1F7AABFB22A04C5CC06D56216856C26C12C531E1F52A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891202, "uuid": "d70b4b04-670c-4e3d-9ce5-1d969f4eebb6", "value": "1572864:ab6LBYCN9I9oap0lwmwBYQi2Jrydy/UgJnsI0SNcucgzxTMWIymNxK:aiuS27WqBR3rEy/TJnsqN0QMWgS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891202, "uuid": "3b6e1218-6506-44d5-b235-09f199822499", "value": 78057464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891202, "uuid": "b152d8ba-d693-4740-bbb0-694941b2064e", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891202, "uuid": "3f550743-c11a-49a7-ad09-b22f492bcdc2", "value": "SerenityTherapyInstaller.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87a1aa2e-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868073, "uuid": "160cef18-d2d4-4cf0-9298-6f172ea10f20", "comment": "Malware payload (Mirai)", "value": "b487667d7209757cd6d9d7b9116c137c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868073, "uuid": "9f99b262-a5c1-4725-8e3e-f44bf6cafe06", "comment": "Malware payload (Mirai)", "value": "2a4385772d1f2231d35cd45b00ed3420e04f4a26a5c7dc9226e2ffca5b5d4994", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868073, "uuid": "7a6f58b4-06fc-4620-b7ca-2c52dbf42f26", "comment": "Malware payload (Mirai)", "value": "928253a0de75cf6f983aad2de6fdccc390a14f4e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868073, "uuid": "bb3aae58-de5d-483f-a077-5ac93b60b85f", "comment": "Malware payload (Mirai)", "value": "68966889784c28b447611b83f750b325a43672c3984d100f573b8b93c4552a526745bc4cd03ad4cf599c43b1dca09369", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868073, "uuid": "0a3c9014-0901-4e4c-9fb2-7a3d2ab429bd", "value": "T1F8F37436B7619E77D80ECE7305A985121C8CD98712D92B6BB2B4E51CEB6BC4F08D3D48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868073, "uuid": "e1b6432d-56a2-4a66-9b32-1035b6ee0c25", "value": "3072:1LNqrhHZ0P6bRFBQiafRjHkLwmrThPaLEne7rNb:1Lsrr0PeRTJUgLwmrThPaLEne7rNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868073, "uuid": "5c44de0b-b313-4d94-923c-08d9983a62e3", "value": 159493, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868073, "uuid": "6a7b5a2a-ae61-4ba5-9a48-37b7964ef8f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868073, "uuid": "1d15b867-74d0-4d03-9367-d6a57a8683d9", "value": "b487667d7209757cd6d9d7b9116c137c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e43e518-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867574, "uuid": "a5c735af-7acc-42ad-9941-50ca7c544d96", "comment": "Malware payload (Mirai)", "value": "5bec461a95b2907f40724cf2d0fcd51f", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867574, "uuid": "eaf4e69b-d19e-49d1-95c4-7d4873c0b84a", "comment": "Malware payload (Mirai)", "value": "2fff77225c6875bad2883821dfc652afa7b33f2a3cd905aa6cbbac572700221b", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867574, "uuid": "f64a0ab5-ccaf-4161-89d9-08c41408e29c", "comment": "Malware payload (Mirai)", "value": "49f262866277d204a35c2ffe2919c23efe1f4c8a", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867574, "uuid": "fd9c707a-280d-4b84-84d9-09665f1d7a08", "comment": "Malware payload (Mirai)", "value": "a1593cb84c796f640757ab727747472c0982b0125e153fc36b7551982e7545023d1e0231446e1c26c81aed01c6128014", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867574, "uuid": "1f45a72c-b95c-4d0b-a36e-b57132ede919", "value": "T13EE34B0BB5C184FDC8DAC1744BAEA537DD72F49C1238B26B37D4AA226E5DE211F5DA00", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867574, "uuid": "c84c9fc6-fbd6-4a37-9895-704921ea3d4e", "value": "3072:iVy/QHH/Nt7LCb2hybaBcwkge1Q0/Sn2JH9lbu6uPTqMKt4:iVy/QHfNJCbhDMIuP1K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867574, "uuid": "dd562476-f9c6-4112-bbcb-678e2a9c4577", "value": 155944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867574, "uuid": "d09e2015-4d4c-4fdc-aec2-94bd7c9f2aa0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867574, "uuid": "4d45fcda-53e3-4b9f-ad52-b220a84d54d0", "value": "5bec461a95b2907f40724cf2d0fcd51f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a230f8dd-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868117, "uuid": "9f51e331-65a4-4b6a-a484-27567a80d467", "comment": "Malware payload (Mirai)", "value": "5e3d7a0b01bb873038631cee82f3dc9a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868117, "uuid": "8388a599-ca9d-41d5-bbcc-7705a37bc05e", "comment": "Malware payload (Mirai)", "value": "30eba69a9c9ecab5cf72a58c1494a33eeab816ca7197b53fdd08c7cb8f499d05", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868117, "uuid": "a702dfb4-f596-4dba-a813-10014b67b66c", "comment": "Malware payload (Mirai)", "value": "35dd6275ac27eb75de4aa5198fec3baa699d0fe2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868117, "uuid": "46ec3ab6-6e4e-4e8d-98a8-006814667e1f", "comment": "Malware payload (Mirai)", "value": "9fd13ff8d56021be8e99ac902a987b01fad991fe9f370e69d584804ab118c26d75a7ed4d0d04459b51f3d971880a6459", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868117, "uuid": "3bef3d61-f549-4128-993a-e36fca3dc18b", "value": "T175F329D7F800DDBAF80AE33748570906B130B7E255925B376257397BEC3A1D90867E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868117, "uuid": "1e876ff4-6ae0-4258-9739-027bbe8728d1", "value": "3072:uUlVBmPMDVcbPqUiTDqSakpCsCmRLdBWVcjbigL/dX/gK/yd7CG9:djS0d6SBpzFdB/L/dXBydGG9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868117, "uuid": "1117bd22-e832-4720-8d95-ac9f8252ebfd", "value": 169312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868117, "uuid": "3baaafe3-327b-4aa3-86ac-791e167039c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868117, "uuid": "7dd0c3c3-14d4-4da8-89be-75044f1cb0b6", "value": "5e3d7a0b01bb873038631cee82f3dc9a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79141534-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868048, "uuid": "ea988f04-742a-4afc-9ddc-58cdae339d9a", "comment": "Malware payload (Gafgyt)", "value": "1166bfa7d74a6f7fbe65ca9e58304c6c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868048, "uuid": "4ebf257c-3b21-46bc-aad4-7cae9d3b92ea", "comment": "Malware payload (Gafgyt)", "value": "364f25130095ad97985abb0b26c56e3078241bb3f8fbd99ca447a760f09985eb", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868048, "uuid": "da70d2a8-24ea-4594-91d9-98a146c5fdd4", "comment": "Malware payload (Gafgyt)", "value": "d6df0faab3c936bf330ec6c062d0e97a509b5675", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868048, "uuid": "0901ba46-7b59-488f-b255-a3dfc243c01a", "comment": "Malware payload (Gafgyt)", "value": "fa20e5be8ffd34188c9433ad548351a4b0ba7d3a9dbb6b1f9bb147e831eb9f2b9511a0789790a5f5831e617778e5c5d1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868048, "uuid": "e4fc8d37-b8ab-4976-8a2e-dcf778d49b40", "value": "T118C32805D5508767C2D3237AE79F825D37325BA4A3DB33215A34BFB82BC27891E39921", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868048, "uuid": "a67d573e-690e-420b-977c-c28aafde5458", "value": "3072:ekYPUfsgnsb0J2ag/VfMkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0MkDy+mTQOY5R3cn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868048, "uuid": "d13808a8-54d9-4038-ab5d-78af4532f4b5", "value": 121007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868048, "uuid": "0ab1430c-29a2-4e4f-9624-454e0dfbd391", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868048, "uuid": "4af46a8d-511b-4f68-8e6d-a0a08a274543", "value": "1166bfa7d74a6f7fbe65ca9e58304c6c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "716b3f99-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711867606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867606, "uuid": "b253c915-26c3-4254-9568-bde23086fd3d", "comment": "Malware payload (Gafgyt)", "value": "95f0a50d6f3b18b871e7fa00246471f7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867606, "uuid": "4e27608f-0f7b-48fd-a414-8be9e0a470d5", "comment": "Malware payload (Gafgyt)", "value": "378634d04a8ab80117a83c07b5468e63374ff2cb7d1e941667bfc666773ebc97", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867606, "uuid": "2d66643e-48f1-4b19-8fde-00fc33a9c130", "comment": "Malware payload (Gafgyt)", "value": "892e12e0f85aff2d776b8350776b32f14fa3ccf9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867606, "uuid": "8d28ef39-cb6e-447c-ba16-fc8f53366dfc", "comment": "Malware payload (Gafgyt)", "value": "2f3d2396cbafc1a0ce76cac370d5592dd5988eb59a4d91cffa133528660cfc073bbe70f6573ccdfebb06c7bb11e10d2b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867606, "uuid": "9f5b8e60-d8b2-4484-95d0-462d9ac17878", "value": "T1C7D3F730E8044B1BC2D227F6A79E469E3F351EA7979733115A387DB02FF27992E25520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867606, "uuid": "cd5d7a0f-a4b3-4be8-a506-d20e4bab5ce6", "value": "3072:+DShVLkDZ6waCAdclVbYJOmP46aQyfPluesNb:VhVeZ6zclVboOmP46aQyfPluesNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867606, "uuid": "1f17544d-fd1c-475f-bc89-0319600ec43e", "value": 130115, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867606, "uuid": "66c98de5-b512-44f5-a1d1-a5891f0d1db9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867606, "uuid": "cc250ecb-ee95-4cfb-9695-3efed4cc86e1", "value": "95f0a50d6f3b18b871e7fa00246471f7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0926fc8a-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891053, "uuid": "45b80b09-7b9b-481f-9bf4-d2d540c329c7", "comment": "Malware payload", "value": "fc79fb7be894841837d56ed532bf8cae", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891053, "uuid": "15571119-390c-41de-9193-c51c0b31f7d4", "comment": "Malware payload", "value": "39a07131bec2804f59c709c37e82f61037765c9f6ac0fff0ed0895a433c3ef4d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891053, "uuid": "1e33caa8-cb88-4883-bc24-6a78bd2d3781", "comment": "Malware payload", "value": "83535d65963d78de3b186ec8db68b1610540de13", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891053, "uuid": "72054090-a9e0-46ee-af14-75f5b1834c59", "comment": "Malware payload", "value": "87716db5b5e75953d6b819fca096b834642841b971fc3cab132a1cc47f3d5df891020291e5d504b7a3d3fce61cdb508f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891053, "uuid": "22390d9f-a508-47c6-ac68-360d992af197", "value": "T1D516292BA159EDBCC159813DC292CB38B53A72F54F22B5EB5E90C3215ACDCF85E79210", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891053, "uuid": "2fdcb93d-115b-4277-8725-699c6f5b6b5f", "value": "49152:89qhCxzT+WKjSXBuX/MDiypVytj5hgleknccaUBj6oz0aHxAiToxZyiWtB9XK:8CQk/K6hgg4HomJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891053, "uuid": "47b0d36b-62d4-455a-9a5d-dec7dd77bea5", "value": 4247421, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891053, "uuid": "07ee7d3b-baf1-46d1-a9aa-db5da74a80cf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891053, "uuid": "48a6bd43-d9d3-4939-879f-b2d4c620693e", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105582.9763.32136", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1722dce2-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891077, "uuid": "7354a7b5-6d4c-4a19-a8f9-1fd215ee2078", "comment": "Malware payload", "value": "f680ca998cdd7bd2f51e3f0ae6e726f9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891077, "uuid": "26d26d64-20d6-4b7f-8558-f1f7969bd54d", "comment": "Malware payload", "value": "3c217a51d6518d89193a90fce52f1cf918450e19be47d039272b48cd5bbf7d92", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891077, "uuid": "df54fd6e-ebd1-4b6c-b1e4-caa60f325637", "comment": "Malware payload", "value": "c421414a8d001415ae9904fa0151e6fc5cc4cab7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891077, "uuid": "cd6253e7-6ce6-4862-84f2-6b9558ec7af3", "comment": "Malware payload", "value": "e1003baad0b31977b0e6b838127d7c8f1ce74c5eac1f39ad8ac3d4026238c442b3c6112d830336c4b4a037d9d06cc8ca", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891077, "uuid": "db1e2b5c-6d5a-448d-9b10-3ae65d645579", "value": "T1AF165C2BAED15D69C319C836C29E4B3894F2BC771322B5D7DDBCD2292A0D5D09E3A710", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891077, "uuid": "2eacd555-48f9-4f04-93e6-aeb03487e485", "value": "49152:a9qhCxzT+WKjSX2ull0vP7QwEm8dhPDg8cP5wpmC2eg+/xAiPr0ZHMWtBpG/:aCQxlEDQwEm4d1c6pmC2e3/nIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891077, "uuid": "760e131d-a6f1-4a59-ace3-98ab620b88d7", "value": 4247421, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891077, "uuid": "84adf6c6-b5a2-4bc7-a563-fd5187d70a4c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891077, "uuid": "31dd1b09-98e2-48b5-82d1-5883fd22bce7", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105582.7167.14789", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c57e107-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867544, "uuid": "8a3499a4-a6ae-4aae-b350-367960a1e430", "comment": "Malware payload (Mirai)", "value": "6d674b70974fe72c1c2dbb453415c07c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867544, "uuid": "e0e531f5-126f-4cf9-bcf6-e16063812935", "comment": "Malware payload (Mirai)", "value": "3ccab419717054ad4727acaa075adcb3b41127132586c71b3116d40ecf8c406e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867544, "uuid": "db40fab0-92b4-4c89-bfb6-01f8f78ff00a", "comment": "Malware payload (Mirai)", "value": "91976b20df8c21728a6f33b5c60dd284e6cd30e4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867544, "uuid": "64c9e4ce-8dea-4eff-b712-49825c2f46d9", "comment": "Malware payload (Mirai)", "value": "dc1fe5d54911475c2360c48e86b86dcc31a902a995d59f584f25f197f87ecca8a9b9f9c4cf71c2e6fd1f3b4cf4af6e21", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867544, "uuid": "9088a6c5-a035-468b-be24-8e0ab433a768", "value": "T101D3F845FC405F23C6C612B7FB5E428D3B2A17E8D3EE720399256F61378A95B0D36A42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867544, "uuid": "6b899bf8-24e6-4dcd-b8f7-d956691b6afb", "value": "3072:gHZ+X7AocxFOV48wlP1z0RraPuk8d+Ow9L3sibL:gHZcAzAV48MP1zuQ9Lsin", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867544, "uuid": "b7bafbb2-13fd-472f-b694-84340ebd4116", "value": 133888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867544, "uuid": "8c38e282-dbe0-4f90-aeef-ea7284d52f8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867544, "uuid": "523f2701-3c6a-4bed-91fb-46b499266bf6", "value": "6d674b70974fe72c1c2dbb453415c07c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bbba65f-ef49-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711880830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880830, "uuid": "d6765ca1-71b8-4721-bfb0-7e9d0d3d9186", "comment": "Malware payload", "value": "1e3010ebc107a5dad0eadefcabc55998", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880830, "uuid": "1b51a184-096d-48ff-bc61-434772402cab", "comment": "Malware payload", "value": "3fe7d4a8f79c7d822fcd5b5ad97b685ff867af003f45728ba92c348dee8b586c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880830, "uuid": "480906ca-7798-466b-aef8-740d11ea636c", "comment": "Malware payload", "value": "338908973ac985e5c69a1742603f797ac01de121", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880830, "uuid": "4285b76e-f572-497e-8613-12e4dd7bc6c1", "comment": "Malware payload", "value": "6d7b988e858f5f44dc4f85d2d3170448d8b01050e3c0b2be8aa1d16004c7585d8a89a89898b874653e2d130f35531ffe", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880830, "uuid": "ad9f8c0c-08f1-4f81-8ea8-8f69f1c4aa4a", "value": "T12E26336DB7B9FDBED6C424BC2D3759057306ED99CCB7CBC6000A44E509B7A4A0B0879A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880830, "uuid": "d9485966-440f-43e4-8e01-c19b483dc036", "value": "d0d84c4a80fe2a032e00d572d85a216b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880830, "uuid": "c84d29a1-65ec-49f5-b234-78f2a6975437", "value": "98304:RAkI06RJYU/Y7uFfUkNixOfWFxa35bJE30Xl+gnUmglF/UHO9G4:RayU/YdkwxkMxaJbJE3015U9r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711880830, "uuid": "7d90b405-d5e1-4691-ad8b-6d01c05ab7aa", "value": 4593168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711880830, "uuid": "cfa9e59b-849a-4a9d-ad1a-be489c8a452a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880830, "uuid": "fa726356-ee63-4042-bd87-13186d1da76d", "value": "SecuriteInfo.com.Trojan.Generic.35529936.17004.8957", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65d08094-ef2c-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868446, "uuid": "ac3c82f0-271a-4cf0-acc4-a0aa5e036007", "comment": "Malware payload (Mirai)", "value": "0f7b17bf97934625dc72a0fbdca902ee", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868446, "uuid": "f84624c9-3409-42ef-a820-28feac656bf3", "comment": "Malware payload (Mirai)", "value": "401e8154f16267dd71e35c557662488b6cc3121d2a331579d9ce591ca034d1f9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868446, "uuid": "1fe04d92-3d9a-4747-8aca-3444b4de421e", "comment": "Malware payload (Mirai)", "value": "b0a49e21b9f9566dfedead5d6e7a3df9839fea48", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868446, "uuid": "9145ed59-3921-4345-9cfd-c6fde2f02e5f", "comment": "Malware payload (Mirai)", "value": "f25f997e14e0201fcfaf111793859d4b379081f18da48022919022b18b57cb81b500d47b2997491d8c557fa0f66f8b84", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868446, "uuid": "c29d7b35-8f64-4392-924d-d727bb810a96", "value": "T12E4349C4A54BD4F4EE0705712437E7368B72F03A1129DE87C768D923AD96A11EA1B3EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868446, "uuid": "4c369da6-7197-4d58-bb1f-81235cbe3aab", "value": "1536:v0f5JN+LtFC7GXhEPsTe3HD/cR4jr2+/SH:v0BJN+LtA+hEPsqX7cAqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868446, "uuid": "4722b127-1e9b-48d1-aa36-fcf8b4153f4d", "value": 58640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868446, "uuid": "f3ed767d-83a0-4274-8fb3-df321d1d6e31", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868446, "uuid": "bfab1769-a335-4d1d-a8a3-89c105fa6fee", "value": "0f7b17bf97934625dc72a0fbdca902ee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19f6a248-ef96-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711913845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711913845, "uuid": "cc5fd3f2-2453-44bf-bb4e-9eb967df5642", "comment": "Malware payload", "value": "69ccdc385fccd992618b81706403cb67", "object_relation": "md5", "Tag": [ { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false }, { "name": "xlsx", "colour": "#683C47", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711913845, "uuid": "8a99cf1d-dd8c-4a67-b946-ef0b194a9524", "comment": "Malware payload", "value": "486f53f40aca1f3a4b21deee9ba1af8f863d281f2977e7d99211b4098015ed4b", "object_relation": "sha256", "Tag": [ { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false }, { "name": "xlsx", "colour": "#683C47", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711913845, "uuid": "c0001acc-a793-494d-9fff-14d86f5177eb", "comment": "Malware payload", "value": "be64205bd2847b8f20a0f704155898bcc4e416dd", "object_relation": "sha1", "Tag": [ { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false }, { "name": "xlsx", "colour": "#683C47", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711913845, "uuid": "f5ff9052-78b9-4d7d-b705-0e114b1fc9df", "comment": "Malware payload", "value": "94a73bacb397878431402040bc12e747ef208de731a357b37d8172acd93838e65ac763500bc892a705d52331d71cbf92", "object_relation": "sha3-384", "Tag": [ { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false }, { "name": "xlsx", "colour": "#683C47", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711913845, "uuid": "509a5d11-29d2-4100-824b-2081831fbd07", "value": "T1CF24D018EBC7F615DBBB1679B29D2E72161190E0409DA042301F8F9AE7D3F6268560FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711913845, "uuid": "76d8eabc-5f31-44f7-b684-4127d03e881c", "value": "6144:brSDDNWpdFg6GS5ldaIbrPT7hpQocgXNoA1d/0:QeP5ldBr/17NoAPs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711913845, "uuid": "5906d6f0-9533-473b-84cb-af1e693e5e06", "value": 212297, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711913845, "uuid": "41af386f-e877-4cf4-b17e-a9bcfd8f1d5f", "value": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711913845, "uuid": "68c71cd6-9dd9-4ff4-a65e-5ff1a5099986", "value": "March 26_ 2024_Report.xlsx", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f654a55-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868113, "uuid": "820cd719-14c0-475d-9b00-2b383faee40a", "comment": "Malware payload (Mirai)", "value": "7b3194120d0f8671e8c358ecb97e3a64", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868113, "uuid": "4ff06c59-cd79-446f-afef-874ecd23f537", "comment": "Malware payload (Mirai)", "value": "4a099c0b78602f554bf38af7e3bb5aa7927a214383b20e37e1fc0c1c1974b71d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868113, "uuid": "db028574-8611-4f76-bcc8-877a8e53895b", "comment": "Malware payload (Mirai)", "value": "c43c106de40babd3c36cb42f1d4df8aa4000010f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868113, "uuid": "f74f9604-1efb-4726-acbe-b5a864c5a135", "comment": "Malware payload (Mirai)", "value": "46fe35586121caa6c6578e2401e5cb4ed975c61fce2548eeb86c30d71a39f82409005a059bbc1fc131e81884cd94cabc", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868113, "uuid": "3a7b7618-9b85-4fac-a706-04cc6854aeb0", "value": "T1B8E32A02B30D0A47D2632DF43A3F2BD193EFEAC121E4F644655FAA8A9171D325586ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868113, "uuid": "aa3973c0-0db7-4190-ab37-cf939cc2a8ab", "value": "1536:9qasIydlpqNkVjxpuvT0sJ3vDUqscE6aVpSyz7nzqvAoYmmo9oPzt6rvwvf:XsVVjxc71re6WSEnoNwvf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868113, "uuid": "af7c8b53-d9e2-4ca7-ac6f-1ad42607365d", "value": 150392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868113, "uuid": "64109408-246c-436f-b868-660c6c2b1686", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868113, "uuid": "afcd504e-9f2b-4ec6-ad0b-6a626efc19ce", "value": "7b3194120d0f8671e8c358ecb97e3a64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "163a0251-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891075, "uuid": "14f7f617-2698-40c4-b186-3ca08aabc3a2", "comment": "Malware payload", "value": "7ca9d1133c695952e000a003963cc83c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891075, "uuid": "b6e59803-dcdf-4c02-a473-66578520ffff", "comment": "Malware payload", "value": "4c59a993dbc2d22d3014b9e12d4117033d96e1d976c1ed5ff329cd0f88aeab19", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891075, "uuid": "b3775e44-d087-4fd0-8bb6-0ceaf274ce1d", "comment": "Malware payload", "value": "365d724b70c20c712119eba917fdad13b89c002c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891075, "uuid": "77d5de71-5327-4694-8ed7-2744fc80b13a", "comment": "Malware payload", "value": "76fbd83549199e55168d1b05b46a0306e53b564812368d746d98a5925982c9736f8c8ecba12139bedafc16f70553e3bf", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891075, "uuid": "cf13492d-61a5-4515-bcef-57ec4b92026d", "value": "T1C8E29213BA409DFBCD0C073781F68A18653786746BA38DE396D8D5781A5E6C02E3FE85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891075, "uuid": "a0460585-1f8c-4f48-9bab-bb346f01ca01", "value": "768:CFGWfsMDCCX9i2fpftnnqZXEyo5lH5ngbQwq:PWTDJX9i2fpftnnqqyo5lH5nEq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891075, "uuid": "7e2f2851-f097-4372-9e88-a84e90c1a3ec", "value": 32768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891075, "uuid": "62e7cae1-47f8-4c61-81f0-d75672445699", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891075, "uuid": "8ebc86c6-4a4c-48eb-9943-e401d7daec4b", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105582.7809.13816", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80135cd9-ef37-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1711873214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711873214, "uuid": "8f020ef4-b93d-447a-bdbf-8ee1fe981a7d", "comment": "Malware payload (RiseProStealer)", "value": "5b7750938fa829ec475dd707fcb2d5d3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711873214, "uuid": "47d950ae-ef86-4a82-a908-6f3a2e3a0a34", "comment": "Malware payload (RiseProStealer)", "value": "4c5acfbc4d264d8c97572426fd9c899f79594fde436ff9d45de81ded5e14a059", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711873214, "uuid": "05e809f1-7804-46f3-ab50-fc0dc4a0fbb2", "comment": "Malware payload (RiseProStealer)", "value": "02764bab10d536e809805842b802be80a7fea452", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711873214, "uuid": "6daf9dee-2e8b-4e7d-8591-505a2c286a41", "comment": "Malware payload (RiseProStealer)", "value": "3ac0f92ef484a54f37d9054ae660a93aca2deaceedbbd72825f355fce29c2c667500975a496dea6d65e894bd84a71dfa", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711873214, "uuid": "b81af340-c54d-4bf8-a4c9-379f3774c038", "value": "T1F866237313A51180E5F4CA38CA3BFEA4B1F7035DCA9198BD74E6E8C129535E1E623693", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711873214, "uuid": "ea74d184-40e9-480f-a03b-4f7e519249e3", "value": "bf41600411b55980e34bba9fc9d825ab", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711873214, "uuid": "fc9561fc-b05f-48b2-a16b-e844dd15eded", "value": "98304:a3G5wrGqiZhXNqIq3iZaJjaezXrHQ6xr7DZHWOAYpa1fL2+nS4:a3T7OXNqItcJ9z7xr7DZ3OL2+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711873214, "uuid": "1979bfdd-1752-4db5-876f-514de9ebdf23", "value": 6686720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711873214, "uuid": "b3606a0b-6404-41ce-98b4-1de26aea6385", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711873214, "uuid": "437a3025-2a51-411a-ac7d-2e2359833c54", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ecc2b71-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868058, "uuid": "268bdbba-47c9-4988-aa02-1e8f385a04fd", "comment": "Malware payload (Gafgyt)", "value": "1187ff4173d3f40d86a906ed87ae4016", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868058, "uuid": "314929cf-5763-4638-954f-9ce99a46b484", "comment": "Malware payload (Gafgyt)", "value": "4dd306ee8b85f1fc2218070c481939db8c7a57d4f6e3785ec48a6c72a948b403", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868058, "uuid": "ed776503-e7d6-4e8b-8cbe-ed14fcd52da1", "comment": "Malware payload (Gafgyt)", "value": "00f5a52298c0cc66bd4bd56299eeb2711810d971", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868058, "uuid": "e951dbc7-7109-462e-9693-994dc2c7a633", "comment": "Malware payload (Gafgyt)", "value": "7e9699a9999950e8677015f87b2d95b7932d66b019d242b81dd1d30844e7fc2b9ab688f6c74e2e843e682fd1af76553c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868058, "uuid": "c157e5ce-514b-465c-aef4-3a487a88d1ce", "value": "T186833B47E9A19FB7C0866A7565AB5E300B13E9912B4F1A4A303CA7F8434F4CD790EF64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868058, "uuid": "bef7c161-d7c6-4866-bf4d-1514956188b0", "value": "1536:ClN9YyOXmMSr4k9dgGwKGg0CfjGJCXdojMyTRLmkxVqOEeofzee:g7OXmMSr4krG3J0BQLmkxVqODofzee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868058, "uuid": "319de8e3-a0c5-42d9-9035-d47e9a48178b", "value": 88733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868058, "uuid": "d6f03daa-98e4-48f2-9798-35b2fcb8c50d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868058, "uuid": "75d7aa41-7cb0-404c-a1b5-30d59ae6a276", "value": "1187ff4173d3f40d86a906ed87ae4016", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "761f8782-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868043, "uuid": "4d822028-f616-4861-a298-71c07993a98f", "comment": "Malware payload (Mirai)", "value": "e02a6b3b5415ff022dc5152b012d74c2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868043, "uuid": "48330ae6-99bb-4dd6-86f9-ce1542089664", "comment": "Malware payload (Mirai)", "value": "4e1a38aaeefd7cf250c549d25257e2d23b6abb0b038e7ada20f656065b5f36c0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868043, "uuid": "15bf1f47-fece-4b57-8613-cc2dfdb7dcea", "comment": "Malware payload (Mirai)", "value": "affdc33b7cdf57e9d41f8f5ae94633603fa5d07e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868043, "uuid": "83fd2427-fdff-4366-a280-43b889a14102", "comment": "Malware payload (Mirai)", "value": "79b1e8540b12f773c5dc48e0d4d4b1b0c6389ecdba278158a7f1ffabb5a83bf79567aef252b4ab956b9a0e67597aac31", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868043, "uuid": "b249f9a0-02bb-4913-9960-ae743dc74e8a", "value": "T1F1F3A53E7A21AF7EE168827107F39F70CF9529D326A19341E26CF6185E7128D0C9EB54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868043, "uuid": "5ffed4a0-a1bb-4803-bca5-bf7cab159200", "value": "3072:B7esBFP23rWfOB7ZOOyGrWKmrThPaLEne7rNb:1euCloGrrmrThPaLEne7rNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868043, "uuid": "eae74dd0-a068-460b-b744-b917e566597e", "value": 159493, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868043, "uuid": "05ac7582-3181-4a8a-b0d2-e8cf8c4b4d26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868043, "uuid": "ccbf9525-3982-4b47-99d0-499e067b9a3a", "value": "e02a6b3b5415ff022dc5152b012d74c2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3993e066-ef31-11ee-a120-42010a9c002e", "comment": "Malware payload (XenoRAT)", "timestamp": 1711870519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870519, "uuid": "9959df7c-2479-4882-87fe-c2a16c1f3a46", "comment": "Malware payload (XenoRAT)", "value": "0b4ced1e11fac0306ee8d9411aea4219", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "XenoRAT", "colour": "#CCBDCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870519, "uuid": "9ec95c79-ead2-4dec-ae8c-7128ed3cb31f", "comment": "Malware payload (XenoRAT)", "value": "4edcb51c961470638828b8f48a0259fb4b9645192f0b30e1d79b789c9b4c4d7f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "XenoRAT", "colour": "#CCBDCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870519, "uuid": "e353688c-012e-418d-810b-454b55cb3990", "comment": "Malware payload (XenoRAT)", "value": "254c74fa4b822381dfb2d258ad77b9935ad619c6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "XenoRAT", "colour": "#CCBDCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870519, "uuid": "9987871b-ec7b-4c15-add2-8b6976beab2b", "comment": "Malware payload (XenoRAT)", "value": "9b3c7c496f367cc047fef38b4b56ae34b3e8988b365dcd4f03629c85ec1c789a09910c04cb0dce47871f158df7dac9de", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "XenoRAT", "colour": "#CCBDCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870519, "uuid": "b0434b4f-a030-41f6-8df8-dda0dd302cc6", "value": "T16623F84C57AC8927E6AF1ABD98324253C7B3E3669532E38F08CCD4E9379338559053A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870519, "uuid": "56dee6bb-db12-4500-b19e-e84647ae5821", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870519, "uuid": "79809545-b681-4b14-b610-2eba8373e966", "value": "768:tdhO/poiiUcjlJInLzo4mH9Xqk5nWEZ5SbTDaoWI7CPW5V:jw+jjgnw4mH9XqcnW85SbTJWId", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711870519, "uuid": "1522583e-7c7a-4477-b338-e9a552e6ec14", "value": 46592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711870519, "uuid": "9bfaf8c2-ca82-4b3c-9329-33c59602b5cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870519, "uuid": "5189d980-4436-40b5-b627-e20e6745ddf0", "value": "0b4ced1e11fac0306ee8d9411aea4219", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "414289b7-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867525, "uuid": "791d6496-2fc1-4d27-982b-e1559b8fecbf", "comment": "Malware payload (Mirai)", "value": "81677c08a1c7d6ceaf97ee7ff7c58876", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867525, "uuid": "bb98d82e-0dd8-4f32-9f6e-a15505b6e40f", "comment": "Malware payload (Mirai)", "value": "50903cb162df71ef74f093eb3da9f4e053a1d950df15ba168f40676b8ef5d71f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867525, "uuid": "f81de2f5-0cd3-4cc7-90d6-a24c391d5c97", "comment": "Malware payload (Mirai)", "value": "b53f3c031a1738a8c0a33d6fc2652bcf7c835091", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867525, "uuid": "12d29fa8-4b02-4ebe-ab99-4d07b1c72580", "comment": "Malware payload (Mirai)", "value": "d5159eda7de9b54c4ebaa64af1f845f1bdc4d4a9eb4b8e43b12aca2dc01512100896bf4975ab687dc295dd6cc84b26d8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867525, "uuid": "55573f02-fe0b-4d33-9d8d-7a79eecb5373", "value": "T1A6735CDAF800DD7DF81ED77B4463450AB631A39116830F3A279BFDA7AC321A51863E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867525, "uuid": "bbbafd5b-67f9-4eaf-9b04-87798baa2915", "value": "1536:B0sG50ofJZuvWlL2qpZMx9A8zy6gHWRovSmZJ6H3ER77sVzqPADS7:B0smbuvWhNpZMx9Ny6gHxXnm3g9ES7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867525, "uuid": "497ede47-6230-4535-90dd-1fd620d48721", "value": 75976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867525, "uuid": "3836944b-e29d-430e-adaa-261818cfc44b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867525, "uuid": "ce6c7526-62a4-480f-9b20-ec5315b1c87b", "value": "81677c08a1c7d6ceaf97ee7ff7c58876", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "660964a8-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868016, "uuid": "64a8ce39-3961-472c-9683-7b0b1a22cb64", "comment": "Malware payload (Mirai)", "value": "dba2a77a7c889a9f1443d95f0f68bc3b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868016, "uuid": "381cd98c-6d59-4ab9-9ed5-cf1d07ca16b8", "comment": "Malware payload (Mirai)", "value": "50cbf00a4d6bfe6541f2d3d7007803e6920ca5dedc25610a410bd4821cb93987", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868016, "uuid": "45cc5cc8-6b38-4771-8785-8bb9e6fc83d4", "comment": "Malware payload (Mirai)", "value": "3c2cfeeb4eb0f1df77dac3a0db4b668e18f806f3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868016, "uuid": "79e827ae-7dba-462b-a310-dc308f70aed5", "comment": "Malware payload (Mirai)", "value": "ca2555e91cc51ec0594f530a0f431ad93a0a23c1ce30f8fc6990e53836583cc1deb6eda6401ab19cd874f5100ab0ca2f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868016, "uuid": "f69805cf-2519-4321-9be1-45050bef73a0", "value": "T197D35B73D8296F68CA54D1B0B0348F7A6B53968181472FBA29B7C2B48483DCDF545BF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868016, "uuid": "31d4d796-0d78-48ca-a33c-b29dc09900bf", "value": "1536:daFF9cAS70O2+0naDCeSKMdo27q5rGEu1tmKWLkw0WU8yErbHH:dki7i+eaDjMVWGEK4KWww0f43HH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868016, "uuid": "2955f3e7-32af-4652-acdd-ce0a6900f3e4", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868016, "uuid": "d8773e9b-72fd-4025-abc7-cbe7fc4d3356", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868016, "uuid": "96f55d64-3a87-4db3-8309-26cbb6f8b327", "value": "dba2a77a7c889a9f1443d95f0f68bc3b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25751e6c-ef39-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711873921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711873921, "uuid": "843e774b-7d73-40ba-b8df-e2bd416f754a", "comment": "Malware payload", "value": "a85f1f536f1b8bd339c675a9f41c1153", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711873921, "uuid": "e65f1c99-0961-4f6d-949d-f3ba6614028f", "comment": "Malware payload", "value": "50dfd5f2b25155518ea3468c2cd6442957812310b07185319fd2e7aeb7bebdb5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711873921, "uuid": "fb909f79-59f2-49b2-8758-78b7e40a6d79", "comment": "Malware payload", "value": "630ef12a58de5403f695ec2be51064aa8c04dcbf", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711873921, "uuid": "5338ad3e-c5bd-4991-9647-3afdfd8cd272", "comment": "Malware payload", "value": "ec869d4ad238467c65b71b0079138b1657156cf08fe06c942b1f1b709653b97c2e424330b1d5f408a448603ac0171a17", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711873921, "uuid": "39d289df-22be-4854-b34a-3abeb08dc0cd", "value": "T110F36C51B4C08032D973253609F8D6B49E7EF9704EA25EDF67990BBE1F302C1D621A6B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711873921, "uuid": "d37afac5-0c9b-46da-ac41-8d484d900f68", "value": "7d3ecdcd0cbbc499efd9c2168aaaeed1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711873921, "uuid": "22cade9a-f589-4e0c-9522-f05d160242d2", "value": "3072:qXCjypXOLG8tOf9+cqe5YbvJfBZMBo4/Bk48cVyjsEQDg2x+:MCHttjcqyYbBLMoYXx+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711873921, "uuid": "8c007dec-0573-46c5-9efd-e4199ec014e8", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711873921, "uuid": "e05568f3-7f0f-4e5a-89f1-5c34d5aa519e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711873921, "uuid": "779f63af-d594-4c8a-81c1-0e4a71419d7e", "value": "doodoo.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d8ae3b7-ef29-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867197, "uuid": "2fa2b476-28f0-45c2-a828-c31a38a52b24", "comment": "Malware payload (Mirai)", "value": "76214a23fd27271b5198fc0cb9325e65", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867197, "uuid": "34e4f590-7cd9-40d9-a1d4-a83788f2fef3", "comment": "Malware payload (Mirai)", "value": "51d6a0fe7af5afcb81617782c492947e8d0c9140ef3c24f47791fe5baa2d38e6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867197, "uuid": "46c7e55a-788f-44cc-9168-1df2ff6b16a3", "comment": "Malware payload (Mirai)", "value": "6ea3dbaf7d6e6649937246a0e08b49f394d20cfb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867197, "uuid": "32c87f08-9aba-4ea7-9bb6-93d1e469d8ab", "comment": "Malware payload (Mirai)", "value": "36e612e8fde2079ad7b05ff1e32d09c69942e589375fdbaa5833f85f975a061c872c21e1ca14c0f7a50eb0cfb9421d2a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867197, "uuid": "c4706c78-2c1b-4110-8b2d-6f2a2dc45674", "value": "T18F14981E6E228F7EF268873047B74E25976D23D627E1D644E1ACC1101F6039E681FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867197, "uuid": "38be1462-93c1-48a6-829c-eca760be4215", "value": "3072:14YIKm5x1fjJkldPjLBGhTv29W+VOtS+YvkVfSRj3t:14+ejJuBGQHISBkVKRzt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867197, "uuid": "47f74161-7572-4ba5-9a95-b6ce6dff990e", "value": 194780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867197, "uuid": "b79b4c9a-c9d8-4830-b7f4-d810d202a58c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867197, "uuid": "ba293843-fe52-442d-9d9b-669e25e12703", "value": "76214a23fd27271b5198fc0cb9325e65", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ca62662-eef5-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711844888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711844888, "uuid": "e28af14e-6c2b-416c-9beb-f8bf96621a88", "comment": "Malware payload", "value": "4ec47410372386d02c432ba10e5d7fda", "object_relation": "md5", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711844888, "uuid": "58a665b0-fb35-41c1-ac47-b225e3da2dea", "comment": "Malware payload", "value": "5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049", "object_relation": "sha256", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711844888, "uuid": "c1d07ad6-d5f8-4cea-a460-8b007a5724d7", "comment": "Malware payload", "value": "fb8b18fa39f198298c9f553496a18aa94fa75c03", "object_relation": "sha1", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711844888, "uuid": "d72c9082-06ed-42a3-b982-ccd7150a18bf", "comment": "Malware payload", "value": "876d96641bfaa0b7bbc3c0701a2479ae545a315ccb3e63c4407dd856847c9759939d18db05fedb7db6e747d8e449ba82", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711844888, "uuid": "d022a155-67d0-401c-a279-528b217d4d57", "value": "T1C0C3D807FEA689AAC46889704AAB5364B739FC449620730337D4733E6FB3E509F56760", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711844888, "uuid": "00f7d15d-2e69-4eab-824c-7037c7970969", "value": "3072:AaQQBMRu/gujaBU+G4p+RSOE+S1/ZjP4Ha:3Mu/zsU+LpV+K/ZM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711844888, "uuid": "99d929e8-e935-43a2-a79b-e1f74bff16f6", "value": 126360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711844888, "uuid": "fb67f570-b30a-4af1-ac16-d4b358bfca23", "value": "application/x-object", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711844888, "uuid": "b8f0dfc8-d105-4d0a-90d4-0c7c048870d7", "value": "liblzma_la_crc64_fast.o", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c4f3e21-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868108, "uuid": "adaab2d3-e5e0-4e65-a447-f86f69af03fd", "comment": "Malware payload (Mirai)", "value": "1dc5a951074f0741581b2ed9ef63dadf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868108, "uuid": "989c6c70-967b-4379-b9fc-764fb5b90165", "comment": "Malware payload (Mirai)", "value": "55d80bce9ab1e7cae99307c741e9360f4db95fa7092762e81c345649235b54da", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868108, "uuid": "ffd23e8d-86cb-4825-8bf7-4d4a1680ae71", "comment": "Malware payload (Mirai)", "value": "880fd735d2c7ace7fb5d179499066ee550e3e7fb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868108, "uuid": "7bc97d6a-da0c-491a-b54e-85cc97e7119b", "comment": "Malware payload (Mirai)", "value": "c6dc3c62489d980b17ebccbec1a7402060ef3735229f27658c3f0dfda8cd3ea8bc4b5231f5dc3a75fbe59266cf401dc8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868108, "uuid": "55b9a1da-c28c-4ec5-ba9c-852c30a0def7", "value": "T143C31A55FC405B13C6C212B7FB5E428D3B2A17A8D3EE72039D256F61378796B0E36A42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868108, "uuid": "6e097719-4cd9-425c-be61-83c087d063fc", "value": "1536:Jtv+s43G5bUWkwRA6Sh71QAFMxK4VIGUT2yR2hO/CoA46n/txlc6wyw1FrR7PVz1:bv+XQjRRg71QNE43UqyR2hOO46/ykbz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868108, "uuid": "aba0df54-0db8-4647-9e76-fa666676fa60", "value": 129792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868108, "uuid": "5073b170-2803-4571-9992-a714d7a192b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868108, "uuid": "44fa9941-444d-47ab-b8f9-f12026c728ad", "value": "1dc5a951074f0741581b2ed9ef63dadf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc12ae0a-ef0c-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711854846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711854846, "uuid": "421b6302-7e52-4bd2-ba0a-b7106a8e3343", "comment": "Malware payload", "value": "c5e931f11bd0f3784d3c0fc0d09d4bd6", "object_relation": "md5", "Tag": [ { "name": "BbyStealer", "colour": "#98D683", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false }, { "name": "pwd-7JKL-2ONE-MNO1", "colour": "#35DEF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711854846, "uuid": "33077b31-a1e6-45d6-ae7b-5db1c4beca16", "comment": "Malware payload", "value": "5644446b17b9ed1cb0d5db4c7b9909eec38dc6aa700d7dc1721006cd46e058d4", "object_relation": "sha256", "Tag": [ { "name": "BbyStealer", "colour": "#98D683", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false }, { "name": "pwd-7JKL-2ONE-MNO1", "colour": "#35DEF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711854846, "uuid": "8f1c7334-8f76-4372-9fdc-cd5274d56cd3", "comment": "Malware payload", "value": "48a7e508e219127d11735b8249f1acbc57c5d216", "object_relation": "sha1", "Tag": [ { "name": "BbyStealer", "colour": "#98D683", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false }, { "name": "pwd-7JKL-2ONE-MNO1", "colour": "#35DEF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711854846, "uuid": "072172ce-d246-4bbc-8db0-f4b0259f99d8", "comment": "Malware payload", "value": "df3d2174f1c1a230e176d3efb9c51b4e7ff130f29b067692879178dc2e59c25f7c5051e8f01bd7d18de26b2203b76428", "object_relation": "sha3-384", "Tag": [ { "name": "BbyStealer", "colour": "#98D683", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false }, { "name": "pwd-7JKL-2ONE-MNO1", "colour": "#35DEF8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711854846, "uuid": "485dd56a-a328-4c91-9db1-afae4cf87249", "value": "T15D0833C4EA1EF898E36454BE70B7AB2D92B1FF350668C56A4DF03A365170AD72D42C43", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711854846, "uuid": "075df62d-e550-498e-b8d0-ea800bd2384d", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711854846, "uuid": "9377eea8-333a-45c1-9a47-ca7c0931c4e5", "value": "1572864:y5J39KJi/HwDf+U9MK5R72TyLKZswmqXwTdvo9Ham4B9ZD/MkxTQhLnP+sG:ygIwDf+U9MKvRGqwmqXAdvvvXBxsh7jG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711854846, "uuid": "47cbfa40-e0a0-428b-a597-21a2b16d89e8", "value": 84710128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711854846, "uuid": "683cf020-acaf-4738-b0a5-87578f09803f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711854846, "uuid": "d7878dc5-5543-4a19-a97f-2756a81dc452", "value": "ArenaWarSetup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7634399a-eefe-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711848716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848716, "uuid": "8fb8cc0e-78a5-435f-8e8d-e75661cce5d8", "comment": "Malware payload", "value": "8e0196b06e49848e696a08058eca79e8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848716, "uuid": "a61d080c-c836-4a0e-be4b-9119eebcf6d6", "comment": "Malware payload", "value": "5658fd8d326dcbb01492c0d5644cdeb69dc8d64acbf939a91b25a3caa53f7a61", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848716, "uuid": "bbe00c79-d6b8-40ff-bbb5-cd1f744b0a4e", "comment": "Malware payload", "value": "f64053a4933e763c4355a1c5a5fffb387bd8f0ff", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848716, "uuid": "4ce9df91-b64c-4569-b214-c181417a6d56", "comment": "Malware payload", "value": "15c4206d84478755926ba31dfe770ab21bb920293bff158ca0964982555339fbb332e0a4f19b1952914a2cecc6373581", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848716, "uuid": "2cf86480-fb4b-4609-9574-3d61aa50549a", "value": "T1DE033B8EB38754FCC306E17489EB5771E877BC325971A93E13A8DB311D21F809729A25", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848716, "uuid": "dff3a1dc-2853-48e3-9426-1cfcb7b5ed60", "value": "84323cde0b314fe9a46464149e61d4ad", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848716, "uuid": "5bb6bbbf-d832-4d6a-8770-f52d7a048898", "value": "768:v0Rs7odJk/68EGUvPNM/ytX2MLPOVvrv7G+IDQms7At:sRs+JcbEbMOmMb0LKMd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711848716, "uuid": "e9e0ea79-5e5a-44d9-8178-3418a601c0ac", "value": 40960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711848716, "uuid": "60a8f723-b7ec-424a-8629-ba810aeea83f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848716, "uuid": "a67f2054-d722-4524-92fd-5f1fcc9e78d3", "value": "SecuriteInfo.com.Win64.Malware-gen.10933.27506", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "406c6c85-ef3d-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711875684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711875684, "uuid": "6ad8dc5c-5f4b-4956-bb04-65200a210f64", "comment": "Malware payload", "value": "62c8114fe67f20c28b98e23e43151b35", "object_relation": "md5", "Tag": [ { "name": "htm", "colour": "#8E475F", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711875684, "uuid": "06981dd7-293e-42af-a1ec-8a8aabf0c204", "comment": "Malware payload", "value": "5868752092c4292013e6c62c28bcd8a196a2e2ff916f2b3d30719b533ac36bdc", "object_relation": "sha256", "Tag": [ { "name": "htm", "colour": "#8E475F", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711875684, "uuid": "a97edead-b3f9-4347-80bc-3dde3443dedb", "comment": "Malware payload", "value": "82c72b08ecf02fe84e18a83d09995b4fb0defd80", "object_relation": "sha1", "Tag": [ { "name": "htm", "colour": "#8E475F", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711875684, "uuid": "d05d06d4-8cc6-44ef-9414-e88cec370baa", "comment": "Malware payload", "value": "085667ad2b2faf013698058ab4158ed76162d6cd8b63b16168183bcce89e7a28facc2721164737b2ef693154dfdec98c", "object_relation": "sha3-384", "Tag": [ { "name": "htm", "colour": "#8E475F", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711875684, "uuid": "cbb8fc70-9524-42b7-806a-054e1dc101ef", "value": "TNULL", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711875684, "uuid": "570993ac-15cc-4c90-85d8-d9533a2ed7d9", "value": "3:6:6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711875684, "uuid": "1d93f33c-c55f-4c2d-a33e-5844dda99ab6", "value": 6, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711875684, "uuid": "2a146faa-2b32-4416-8ed2-22b1437eb901", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711875684, "uuid": "3daa0016-3926-41b6-8426-31da5ac86063", "value": "tmp42CB.htm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7f87de4-ef4d-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711882730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711882730, "uuid": "98fccac5-1aaf-4517-88f8-729887b8edf9", "comment": "Malware payload", "value": "d0492d61a010c75b69a21b31761ac655", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711882730, "uuid": "60d0dd4d-e190-4bab-88c3-cdcde77b4fb8", "comment": "Malware payload", "value": "58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711882730, "uuid": "3e906ffd-b424-44bd-bb8b-d4820001abc2", "comment": "Malware payload", "value": "0168759aebd253fed1dd89a44d260f6eadc94a2d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711882730, "uuid": "22ba65e2-b9a0-4181-a654-53f0945d8ee8", "comment": "Malware payload", "value": "9278325db8b416cfb3a3627d9f1d0a7e6381d26a22c3eddf9691bd2168ffe52b067eda06a28678fa1ca4a28c7164e9b4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711882730, "uuid": "25478ac9-fed3-4563-8fc2-99b04b652bc2", "value": "T1543412A427769A41DD909EB077F863535FBABBD60840D28730CEE5B55E8B380E29437C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711882730, "uuid": "f6a79b30-5ad4-44be-979e-93f524cfbeb1", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711882730, "uuid": "e9125473-a5c7-4935-ad0e-c530c9094b33", "value": "6144:AhAZ0mc86LHVUCAlfzHORKOrfIrIEgcNxHookuvxNimwE5R:ImcJLHVpAl7o3rfwrYt+7/r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711882730, "uuid": "3bfb6557-df38-4904-9b36-90b032f2d817", "value": 240264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711882730, "uuid": "cc4564fd-3710-4d21-8a74-9636a09e1c1b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711882730, "uuid": "4fc4251c-ade4-4606-bf1e-a52e52ded362", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e834f3ef-ef2f-11ee-a120-42010a9c002e", "comment": "Malware payload (QuasarRAT)", "timestamp": 1711869953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711869953, "uuid": "acec9e19-3df3-4adb-b516-d65d7c131a8b", "comment": "Malware payload (QuasarRAT)", "value": "caddfe2adb6d8c878a2a1001e7fd4fd7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711869953, "uuid": "feb7f750-8f3f-4310-a62f-422984c474c2", "comment": "Malware payload (QuasarRAT)", "value": "5ac4db28729ef274c94e5a65ea6f2900be893f63d3b984a7ba27cc83a2c54e1b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711869953, "uuid": "67235a17-ecfa-457e-bd19-e56fe489ba24", "comment": "Malware payload (QuasarRAT)", "value": "6d4b54d81a061efc4a1562d3adae524a22d158df", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711869953, "uuid": "c6a32730-bf96-4bff-8bd5-97d3e96786e4", "comment": "Malware payload (QuasarRAT)", "value": "78a40df9f50ab91db81b3bb055e4867a3cb4410157c9ebb3ec0dead3b7d6b7cf42dab42f2610a18ec24cf94d8c5d6ace", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711869953, "uuid": "11409785-705b-4cdd-b021-0f267a968ef5", "value": "T174E55B143BF85F23E1BBE273D5B0041667F0E82AB3A3EB1B5191677E1C53B4059426AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711869953, "uuid": "3c9c832c-c773-4d7f-a747-f564110378b4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711869953, "uuid": "17e635a0-395e-4615-ac4c-5038f81516bd", "value": "49152:mvkt62XlaSFNWPjljiFa2RoUYIQaDkE2Hok/+FtoGdRSTHHB72eh2NT:mv462XlaSFNWPjljiFXRoUYIQaD5T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711869953, "uuid": "621f0811-325a-4715-8952-8e316c1bf084", "value": 3265536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711869953, "uuid": "a3f0f0ef-0dfb-488c-8caa-2ffb25682faa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711869953, "uuid": "6d2a7eda-d433-452f-b907-ddedaf1af4b1", "value": "caddfe2adb6d8c878a2a1001e7fd4fd7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4af52fbf-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867971, "uuid": "261662bf-cd2d-4d43-8309-5c3285d26c7f", "comment": "Malware payload (Mirai)", "value": "674d0a7fdcd07d7496e25f39b4bad83b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867971, "uuid": "792db94f-064d-42f3-91e1-5e59ec5b338c", "comment": "Malware payload (Mirai)", "value": "5d352899a059337123d961aeed9a7942d3bdb977cff35765d16754f9cc3ffeb3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867971, "uuid": "557d8016-fbbe-4093-b40c-1b265135d12c", "comment": "Malware payload (Mirai)", "value": "88e2bf775d83fd8d9b0a0c7e76369bba22af513b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867971, "uuid": "957467b5-b1f6-441f-9c07-24a894ab5a61", "comment": "Malware payload (Mirai)", "value": "a81002456d701e6953522857c55270f43472089051ec307c00e69c4fc702fb1a01bb9828bec4bbd49cc343d861457583", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867971, "uuid": "842230ed-0290-4985-a655-c0c4165cbddd", "value": "T116C38ED9E183D4F3E85B04B4603AEB3B9E72D47A211AFA85D729CD32F8D25809117A5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867971, "uuid": "19771ff0-5dae-4f20-8350-18bee5d114f7", "value": "3072:MopX/y7dqAb9bbok5RkzL27S9mZ3T5CZpHWGc3R3mA:MopX/y7dZb9bB5izI3lCn2GcBm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867971, "uuid": "aa6ed83c-0905-4a94-80fd-fa0cdc83ab02", "value": 123660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867971, "uuid": "bba2780a-29c0-4760-9f4e-8925eddf5a09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867971, "uuid": "2aa11c76-2ce5-4b29-9ea5-f2a2de1eb77b", "value": "674d0a7fdcd07d7496e25f39b4bad83b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffdc23e5-ef51-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711884595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711884595, "uuid": "45678016-41fc-419a-8949-454ef709b8bd", "comment": "Malware payload", "value": "2062e04061d3a75181522a0311b536a4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711884595, "uuid": "62f725a3-7e5a-4ef8-852f-0befd37e02dd", "comment": "Malware payload", "value": "5d3dc50be623278fbbf6e68893718ebacf5c361438f45798083f93ffb4c3a735", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711884595, "uuid": "5dbd024e-685a-46f7-bb8d-e20629ef7570", "comment": "Malware payload", "value": "575522a5e0e457e4832e9f2e3459c44306be20ae", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711884595, "uuid": "d6451b17-1b19-4a15-8fed-6e3c5b491c82", "comment": "Malware payload", "value": "5ab2a2201059e0f1206267915e82e0fc26479cf876ae1a3ce6532ee2ae3361ec56791ec07cd9be9e7a2602574b204831", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711884595, "uuid": "29114fb0-d364-45eb-90a7-f9cd6481deaa", "value": "T1719633159B603995EF12BF30B4FD472B6FB0B2992D9C915FE008C4986EE03D5EB78099", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711884595, "uuid": "abd5a13a-4aeb-44a8-bf48-fa94ba49ee64", "value": "6218aabf25c77770edb2551f6b22a620", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711884595, "uuid": "8c9f4f3a-76f0-4e19-b015-0666737fa3f8", "value": "196608:NC1r4NPj4QtyuilcYf8eFluOytVBvyyPVK7fgkR0:xaQtdiTfber5yyP210", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711884595, "uuid": "293c388d-7b7f-472e-a18a-a62f6d562f46", "value": 8641904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711884595, "uuid": "f4b369aa-cdbd-436f-8872-06409c5cd4f8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711884595, "uuid": "359b9956-0e62-489e-b253-b0f23d20ce8a", "value": "SecuriteInfo.com.DLOADER.Trojan.23692.10658", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b7dea19-ef4b-11ee-a120-42010a9c002e", "comment": "Malware payload (zgRAT)", "timestamp": 1711881635, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881635, "uuid": "8aaefef5-857a-45f9-a22f-a6d118d49830", "comment": "Malware payload (zgRAT)", "value": "c3455de1df35bc16973cccef3ca8fa0d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881635, "uuid": "7a5e484b-50ca-45e3-a9d6-578abc90230e", "comment": "Malware payload (zgRAT)", "value": "5e3842498e7cc018d2514c547c11c7912b486ad19fa543477a95fed900a85b8b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881635, "uuid": "a85299c3-9af8-4dc2-830a-95850adaf9b4", "comment": "Malware payload (zgRAT)", "value": "0c38d276efc56c05d85fc48731e65e5527de9de3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881635, "uuid": "8b4c6eb2-14b4-4ff1-994e-52bfbbead615", "comment": "Malware payload (zgRAT)", "value": "ea4019e504392665513a834491ba1e53609db3f32350925cb1e08c34824ced943c53002e750f9814101fa88e4ebe747c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711881635, "uuid": "e2321c6e-3097-46e3-99db-d530a8b73603", "value": "T1FA052379DBF44966DD8A0A31A6D6CF6341F8F703D68601D2D3A1E93D4A923F2314827D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711881635, "uuid": "d253b822-376b-4e97-be14-f29cdadfebc3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711881635, "uuid": "ad97fbac-080c-41da-9c1e-f141f13107e0", "value": "12288:/sqe1Loidec4BMTKT4RzwgAqn7NV2lul21UvyhAKHKiPQCMmf7jyJcl:/sqDbc4BYEI7YuwU8H2CM6HyC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711881635, "uuid": "c043ae13-c6d5-4c8f-bceb-0f2af79e7351", "value": 805512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711881635, "uuid": "8752ae55-b565-4c2c-b2fa-e6661d4bf1e4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711881635, "uuid": "f2283120-368b-4cfc-9424-22450e33e0c1", "value": "c3455de1df35bc16973cccef3ca8fa0d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c0e45c7-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868053, "uuid": "23ccd69c-6e75-4967-ba46-4d87fd336a60", "comment": "Malware payload (Gafgyt)", "value": "4a47cbc65fd93e7da7bb4dc4d964a961", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868053, "uuid": "a35efdd4-d384-4b61-bd46-a65f68923e80", "comment": "Malware payload (Gafgyt)", "value": "62894075b2dbfe20ab01bbd392335b3422d9f04d029a3378a026dbfcaa8ecf0d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868053, "uuid": "d96cad85-e8b2-4387-a44e-b7127cea1345", "comment": "Malware payload (Gafgyt)", "value": "8b286a640fcbd13954a428c3bf2cbf2358ead28d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868053, "uuid": "aca63176-faaa-44b3-8ac3-61aafebe7789", "comment": "Malware payload (Gafgyt)", "value": "ceb5a72452e781beb518e574327859c62120047c725557a54c487b271b56abda57363850692cfb4fd82ac5467f23a19d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868053, "uuid": "be8fb517-cd7a-4743-a779-4b448da944f7", "value": "T1F9E31814F801476BC2D323F6A65D879D3F3517E623DB33115A38ADB02FC2B992D299A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868053, "uuid": "749047c7-cd51-4d6e-99f7-57e1878f9f9d", "value": "3072:Oh8pDxLxO0PXW8/2lMq9p5hBke+84FmzZQQAhtRq6AAe:lm8/2l9p5hBkeWFmzZQQAhtRq6AAe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868053, "uuid": "71824c93-012c-484f-aa09-bc6ecf872dd2", "value": 156077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868053, "uuid": "df97044a-e159-42a3-b417-ab53ca91f900", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868053, "uuid": "55b7fa26-0eb1-4227-8732-8925c795a78b", "value": "4a47cbc65fd93e7da7bb4dc4d964a961", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69366e35-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868022, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868022, "uuid": "ba4e9532-a03b-43d6-ac99-e397da0b27f9", "comment": "Malware payload (Mirai)", "value": "34518c5a21f0daf44657ba7b4024cedd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868022, "uuid": "9ea84052-28ed-465e-93b6-cf220d21f01a", "comment": "Malware payload (Mirai)", "value": "65f64b270a10255db1e55a158a02829a3af982cbcd4b56f14e58132cbb45e6a9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868022, "uuid": "2b47aae2-af7d-4320-84e1-faeab7987b37", "comment": "Malware payload (Mirai)", "value": "b68134eb6c77426bea9121c2a27cf0eb01e2637b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868022, "uuid": "9575d56d-9c11-400c-bef8-894e0689e2bb", "comment": "Malware payload (Mirai)", "value": "7cc67432a8003fd9fbab4341fc6652774211e6d1ca812cb0b757b11d396a8075bf487de472ee4d4d6b70eb04dfd6f1a7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868022, "uuid": "c8832872-a35a-4e88-b0f2-c5d539ac70f1", "value": "T14963720AAF600EFBEC6BCD3B46E91B45248C641A21A97F757934D828F70A15F05E3CB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868022, "uuid": "4b68ae37-b128-443d-9c96-b497b983ce4c", "value": "1536:J3ZGjWn4TpopQRRiSHUSg4kpInGKyZlDdck9:vGjWn2poMiSHUnKyv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868022, "uuid": "543abcf1-f7a5-43cc-b65f-f6833a5cdc6f", "value": 72652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868022, "uuid": "4bf0d621-e9a0-447a-a8eb-a0b861229437", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868022, "uuid": "5c74569f-6a00-4238-8b3a-f65c47e8c589", "value": "34518c5a21f0daf44657ba7b4024cedd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41ef133d-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867956, "uuid": "54c5e099-a122-4b3a-b545-ef53402f62a5", "comment": "Malware payload (Mirai)", "value": "01183bc3b7f8a3288de0bd79b4e11c4f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867956, "uuid": "f5b1d54e-10bf-412d-9cf4-5c59ed612c22", "comment": "Malware payload (Mirai)", "value": "6705066354c100973c337c1a5949b5239a28c93b4b335c11aed416bad74a2840", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867956, "uuid": "276a999e-a5f0-4bb5-8c7c-b8b67c8a19fd", "comment": "Malware payload (Mirai)", "value": "c8d7005e239f0e74ede8404d4e37236e8d87e520", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867956, "uuid": "5b0bfe2b-500b-43b1-9456-167a8e22491b", "comment": "Malware payload (Mirai)", "value": "165353010bd01ba6c271b7e887fe980c977b10b685f6b7e7a7a6eeeb2725ee4edb0505865c0801cb8c7c80bb320fe1b3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867956, "uuid": "fb46c6ca-a5ba-40c1-8742-5a48ccebbef1", "value": "T109433925F9352D2BC4D8697A21FB4359B1F51A4B34FCCA1E7D720E8EBB6095022172F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867956, "uuid": "96167a26-d016-4034-9672-d8c623d23f32", "value": "768:ng7IVNYCkSxXrt+wXqSz67zarya8PRDyl/a+lQ7b6O+lvAxPZ8n:S8SvSxbt7r+7zarya2Dc1M8l7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867956, "uuid": "2eb554db-5f8c-4386-85a7-d3bb5b8e3b7e", "value": 58860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867956, "uuid": "b38a7acc-4b26-4484-b259-ff1e90c4fa83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867956, "uuid": "d0d2c994-b2f4-4616-8813-36db9572152b", "value": "01183bc3b7f8a3288de0bd79b4e11c4f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "777e57af-ef29-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711867187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867187, "uuid": "2afb9327-3c98-4ec5-ac44-f4b201d3cf7b", "comment": "Malware payload", "value": "3dce2b0d9b6f953ba62445381cca0ad8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867187, "uuid": "684f89b0-539b-4167-90a2-d8d2dd30949c", "comment": "Malware payload", "value": "6a206c6e78ba6c8d362a6f4a75378c38f06577b2d4a76dd26d6f509f5cc9a651", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867187, "uuid": "6eac7a62-6ccd-4d9f-a10a-8718dde756dd", "comment": "Malware payload", "value": "debd542c00ea26fa075b2eef015691e3f20e3dc5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867187, "uuid": "acd49ae2-6443-48cc-8d8a-3f8e690def96", "comment": "Malware payload", "value": "2d49bc00ace3c7f4534600808248a963b3fceb38178aa3d995a7a9822604f280e7b52d0dd8c88396e373041cdbc12cb9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867187, "uuid": "55df945c-8d1e-4760-b833-68c585718937", "value": "T1062318D2F500AD7CF40FE739C1074905F131B29655532A376BA3B9B7AD362A8483BE86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867187, "uuid": "029e6788-dbd0-48dd-a9aa-c64f37a32f20", "value": "768:caQ2IjIhFfjhBdcUxzej03Wytr9j8/6mGS6Ou89naLOvRZvZs7tzK3dEviEBnoGn:ciIAFbhBrxz403Wqw/0SDu89na6ZvZU/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867187, "uuid": "71d59842-b0f2-426e-b8fc-ccaecf35cea5", "value": 47684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867187, "uuid": "1bb7e3e4-3283-4ec7-89b9-c78b8036cd75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867187, "uuid": "ab0b3c8c-b904-46ef-ad77-ce2b9311d2eb", "value": "3dce2b0d9b6f953ba62445381cca0ad8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18589f7b-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891079, "uuid": "b08fdba4-8453-4136-be31-5d73b92c1428", "comment": "Malware payload", "value": "a2c581a9df3b672f5542c165de573466", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891079, "uuid": "0bd37891-5e51-4d80-b204-cc9d0ea26342", "comment": "Malware payload", "value": "6a81f710316d4def9ebefcf1489c88fecfe88897d78acae45412e87115d984cc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891079, "uuid": "be750b4e-ac1f-4896-ab60-c5410f54f79f", "comment": "Malware payload", "value": "fc9d792f56efe05905498338b80199c5bc47e911", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891079, "uuid": "2edca127-a0c7-4010-996e-cef98e1a4833", "comment": "Malware payload", "value": "157fcda77723202aa5924e5ad3efa9d1ff447a1fceb7a6e6236bf128478db0399f462d42f416ebab7afa758841591971", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891079, "uuid": "2b685f67-dae4-4617-9444-c905c18ba5e9", "value": "T13CE29213BA409DFBCD0C073781F68A18653786746BA38DE396D8D5781A5E6C02E3FE85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891079, "uuid": "60e8c680-00c4-48d0-88f5-c5cbac6f33f2", "value": "768:0FGWfsMDCCX9i2fpftnnqZXEyo5lH5ngbQwq:pWTDJX9i2fpftnnqqyo5lH5nEq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891079, "uuid": "ee45b609-02fa-4ab1-af88-60ec63da3056", "value": 32768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891079, "uuid": "6bac99fc-b808-4a20-a810-f5ab6293d15a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891079, "uuid": "2ebe3449-6ba4-4416-b1bf-dcc496fbcac0", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105582.31018.29026", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56e99cfc-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867991, "uuid": "2af389fb-1962-466c-9107-a4309552f2d6", "comment": "Malware payload (Mirai)", "value": "16b303154722d580203f817a65317431", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867991, "uuid": "41400e93-7335-45bb-a1be-4f72dd62be40", "comment": "Malware payload (Mirai)", "value": "6b0de95e32ceb92ab8d340909e633ee45f99edfd8439d0bababaf6daa3c8ee34", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867991, "uuid": "8c75b645-c251-44d5-9e18-0ff3fb3199fb", "comment": "Malware payload (Mirai)", "value": "733f07cbb74c29803cd7a8699681116ead24f9d4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867991, "uuid": "e1083d84-0e23-4e00-a60f-397d4d1fe6aa", "comment": "Malware payload (Mirai)", "value": "4d8f16c9865940a21c7e645264afa645546a22c0e1ae438aee19ae8b9ecda10789748a3435589fe6e254a589fd91e4d3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867991, "uuid": "0adccb01-74cd-4d7f-9f87-49176a046897", "value": "T13DB34A77C8296FA8C259D5B4B0B09F792B63A58182471FBE54B2C3B64083DCDF505BB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867991, "uuid": "161ac6ff-1348-4b2f-b500-e4bb246c73a5", "value": "1536:2aVTHW/qIAmPqovHFGEWCRPKBKFnLblvCifzQVW9kXxeUwr/zy:2qWLSovlDWMSBOlvC2sWqXxQrby", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867991, "uuid": "ff26fa5a-c916-4992-a25d-66179f944fa5", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867991, "uuid": "4876024c-893d-414f-b3c6-d3b32d7eb33b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867991, "uuid": "1939b4cc-68b3-4fec-aeca-b2ed2705be1a", "value": "16b303154722d580203f817a65317431", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3771349b-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711867509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867509, "uuid": "3a21ff7a-90ce-4c47-ae71-43ab2790d4e7", "comment": "Malware payload (Gafgyt)", "value": "a069613c3949f2245d8daf004b68c2a0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867509, "uuid": "1174ad4e-f007-44de-8c2f-a79a7db1cc79", "comment": "Malware payload (Gafgyt)", "value": "6cb26708037d1608882c14a50249b460edc59f25fe5bca770cef393ec59f7399", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867509, "uuid": "48ea1f8d-c54b-4efb-be81-2b574b8e989a", "comment": "Malware payload (Gafgyt)", "value": "77d7c59ca52cd081d4c8001a5b5ae801a3322645", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867509, "uuid": "596fa7c3-9743-4e76-8644-ad800d48b129", "comment": "Malware payload (Gafgyt)", "value": "c63337e33d6dd2aaff1785c729ee60680b055795245ea10d88cb9204b4c5e21e148bf2dfbaff9a48bcedf77ea4b21413", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867509, "uuid": "bfe48848-2a45-4c92-b570-7c3e44c0c88e", "value": "T18BA31A44F841872BC3D327BBE78E479D3B36569467DB33116A386EB42BC17C92E29520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867509, "uuid": "cc1ccf99-0b2e-4b70-ba40-98a5f68fb6d4", "value": "3072:VSx+i6mqaObhN1nPNKV+qKmZuqQ4DPwXXtse:y6mRObn1nP7qKmZuqQ4DPwXXtse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867509, "uuid": "d4be4531-e2d5-4bca-b696-6c09dd4c1cee", "value": 100871, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867509, "uuid": "29f5f367-84de-48d8-a0a1-bbb17ff914f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867509, "uuid": "0c4c6a66-4549-4382-9fae-93b4fc07a786", "value": "a069613c3949f2245d8daf004b68c2a0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a645b84-ef29-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867192, "uuid": "be32bd6e-fa91-422e-8468-de42a467049b", "comment": "Malware payload (Mirai)", "value": "9a4d017176808ca4b4e620a50f7f105e", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867192, "uuid": "ea6ccca7-d9c8-4508-8c8b-15ff115e2da4", "comment": "Malware payload (Mirai)", "value": "6cfbd4a9518ea7bc8b7d7ca054bed2f21c7fe5952115c35544a00c5a341fc224", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867192, "uuid": "a0c80598-64ee-437d-bd51-7ee74f0edf4a", "comment": "Malware payload (Mirai)", "value": "229e39134a6173fbb3376bdad88db1c2f3f17ab7", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867192, "uuid": "dac524f0-a1d9-4cbd-a97b-ab1729898191", "comment": "Malware payload (Mirai)", "value": "27bb8135fe3729d0e2e5defb74e2631e98daa62195ae1cdeefd03383d75eeda817c2d6cf8e8c190c365eac05ce25aa89", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867192, "uuid": "4e185c4d-953a-451a-9d0a-83c252d68b4b", "value": "T154D33A17B5C180FDC4DAC1B44F9EF53ADD32B1AC1238B16B2BD4AA221E5AE315F1DA50", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867192, "uuid": "3fc99143-f5f6-4831-907d-59ad2a67565d", "value": "3072:tGtwnNiaOnUT3FiPT9OSQ7AOaogjV2iZlBWCgxiASQPdL:tGtwnNiaOnUTRuLy7SQPd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867192, "uuid": "3441869c-a704-429f-b824-aeac3270f5f5", "value": 139576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867192, "uuid": "289b64e2-0367-44bb-81ad-2a861f99bc97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867192, "uuid": "0fc880ca-de3e-4f93-8096-ae64271be359", "value": "9a4d017176808ca4b4e620a50f7f105e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50f00552-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867981, "uuid": "a05ee7be-b7de-413c-a2b6-052f512ac637", "comment": "Malware payload (Mirai)", "value": "6e2dfd2717f4f7b8325e49c1fd3b28d0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867981, "uuid": "05a35681-a2b6-4bb5-b052-4be41a1b0d8c", "comment": "Malware payload (Mirai)", "value": "6dc8a360e4620c0b8dc3e85642955065de7d6624a1d6b8d0a91780bbc16c9720", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867981, "uuid": "75ddff6b-c210-466a-b977-2381e4224dad", "comment": "Malware payload (Mirai)", "value": "88b2415e8d960539c7f5f6f17bd1d79543a962a3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867981, "uuid": "968d2095-c4a2-497d-a553-9749087c28b6", "comment": "Malware payload (Mirai)", "value": "0456a5a0482a5f8e039524110ec7e3b9e8629b52441d70b19e958414ccbbed749d05a32f32502a418819eb6fefc10321", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867981, "uuid": "91083d6a-1e0b-47c6-ac67-cc08967a1150", "value": "T118E31845FC518B23C6C612BBFB5E428D3B2A1798D3EE72039D216F20378A85B0E37546", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867981, "uuid": "c5925062-854f-4f14-8843-cfd3a8f374fa", "value": "3072:EwGVErB2f5oMFyr4JdPNr84ssRp6pCSAv:EwGc2fZQr4JZNr8tgQCSk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867981, "uuid": "4699d17c-167f-433b-acd7-4e6870a0ab11", "value": 150240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867981, "uuid": "6bd657cc-ac5f-4fc6-a2c3-c51e44991e04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867981, "uuid": "273c89d1-1904-4cc2-b484-bff53942d7ec", "value": "6e2dfd2717f4f7b8325e49c1fd3b28d0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f2f0822-ef31-11ee-a120-42010a9c002e", "comment": "Malware payload (QuasarRAT)", "timestamp": 1711870528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870528, "uuid": "d851ed75-9ea8-424f-9c91-56449268d61c", "comment": "Malware payload (QuasarRAT)", "value": "22afa096fc6c8ce6b3c60566e7b41c37", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870528, "uuid": "8a5504e9-625b-443b-8c84-39eca2c228a6", "comment": "Malware payload (QuasarRAT)", "value": "6de9efd795fe73eeb521b0780330a92e947d6019d2e9b17beba1c36472b463d1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870528, "uuid": "63a53643-e2f7-4498-ac4a-ebdcacd780a0", "comment": "Malware payload (QuasarRAT)", "value": "33d0f33ea8bf5bfa2c6e02aeb662593d9a4085a7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870528, "uuid": "10b58117-76ff-4546-bd88-cfd9d78f27e0", "comment": "Malware payload (QuasarRAT)", "value": "c852aa08d5adea05f3a831f0c322e2fb95ec2c99ca3e8344e7f4ff4ffdb1ae0e6698a9c0fb12698a4066359cbacb0e06", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870528, "uuid": "1c878f84-a276-4787-9e4e-190590c35356", "value": "T138E56B143BF85E27E1BBE277A5B0041267F0FC1AF363EB0B6581677A1C53B5098426A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870528, "uuid": "9a24c86c-35e7-48ef-8633-1bfd04bcfa00", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870528, "uuid": "8c2bf1d2-89b5-44c6-b110-baa28241bf84", "value": "49152:qvKI22SsaNYfdPBldt698dBcjH/WRJ6kbR3LoGdZTHHB72eh2NT:qvn22SsaNYfdPBldt6+dBcjH/WRJ6u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711870528, "uuid": "def3dae8-20c4-4b30-8d32-c3365ba37e62", "value": 3265536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711870528, "uuid": "a38f0266-a7f7-4944-b003-e24980346138", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870528, "uuid": "268f26db-d184-45d0-98af-cd61ad1708d9", "value": "22afa096fc6c8ce6b3c60566e7b41c37", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fd1a9e9-ef48-11ee-a120-42010a9c002e", "comment": "Malware payload (QuasarRAT)", "timestamp": 1711880408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880408, "uuid": "fc328052-5b67-48a4-acce-53a0abce576b", "comment": "Malware payload (QuasarRAT)", "value": "479ebaee10717b48969ebfc7d10ffef2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880408, "uuid": "04358856-148e-4ae5-a113-a0c7303b28cd", "comment": "Malware payload (QuasarRAT)", "value": "71e4d35156e913340d32d565806004c2297bfbc05b747874279830e34056dbce", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880408, "uuid": "10023682-b572-4eae-b272-b17647018e94", "comment": "Malware payload (QuasarRAT)", "value": "3061bd9bc43d9d580af7d590a3ea8a134488a70c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880408, "uuid": "19272810-83ad-450a-a8b4-9171454e0218", "comment": "Malware payload (QuasarRAT)", "value": "dec8141a08496932042f7a3ef532b2bace4ebb750962574c29809cfea88f260dbc6198ced1321b58d720342037ea524b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880408, "uuid": "332efdd6-f31f-4466-a07e-81067fc4825a", "value": "T106E56B143BF85E27E1BBE277A5B0041267F0FC1AF363EB0B6581677A1C53B5098426A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880408, "uuid": "19baa8b8-784c-4abd-898c-cdf2a3b51d40", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880408, "uuid": "01067574-f6fb-41d2-91a8-51d6d9770b5b", "value": "49152:DvbI22SsaNYfdPBldt698dBcjHdGRJ6VbR3LoGd3THHB72eh2NTA:Dvk22SsaNYfdPBldt6+dBcjHdGRJ6n3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711880408, "uuid": "8dfd21ae-8f6c-49e1-a406-79c3c1e80562", "value": 3266080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711880408, "uuid": "1303a6cf-8acf-4e0f-a2bb-9a41acb49bdc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880408, "uuid": "378e5c4e-f3c0-4f49-9bf6-a4020c70b964", "value": "479ebaee10717b48969ebfc7d10ffef2.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e6c886c-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867521, "uuid": "f3b4b769-e543-4449-9156-5cdf01efff01", "comment": "Malware payload (Mirai)", "value": "4b5ae1f2435d73d33a491cfb9ed51d90", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867521, "uuid": "f3d148b7-6d4f-4dd4-b93a-0f4c6c06abaf", "comment": "Malware payload (Mirai)", "value": "747b23d60c72448bac7e0baac7a79c37cc6bd11088a0f0661602d7b04dd4b9ad", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867521, "uuid": "02b49e12-754e-48e5-8524-bf1b893ffce4", "comment": "Malware payload (Mirai)", "value": "f6201a52074480599714d10538216e580cb0d3ee", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867521, "uuid": "49d11340-0a4c-4abb-b7a2-3c752f83d728", "comment": "Malware payload (Mirai)", "value": "723282aefeddab7913147e0c4451f951da4a43753975a2b0bd8dd8cd986d19c25d75c736878c0348bd9be90467e08685", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867521, "uuid": "582102a8-7597-4ced-ab2a-2f9fcc96a47e", "value": "T1A4633C02731C0A47C1636EB43A3F17E083BFAA9121F4FA84651F9B869675E365186FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867521, "uuid": "c959e487-f4c2-42af-a452-bed184e74226", "value": "1536:DiEi+tatSlKuxs/Y2/IdbnY3qZIbj8boiwDy:9Ut8IizZIH8FwDy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867521, "uuid": "cfb48549-751d-41f6-8a07-b8358112e0a0", "value": 68236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867521, "uuid": "6563d3ee-75b9-4b20-bb43-4dd6e62d66fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867521, "uuid": "65cfdf08-9cb7-45fc-8ade-db6a7e112c10", "value": "4b5ae1f2435d73d33a491cfb9ed51d90", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cb20abb-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868001, "uuid": "d5f17078-08f4-433d-b304-24a152ef6a91", "comment": "Malware payload (Gafgyt)", "value": "099856036b4f5414c761d4c03a4ab93c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868001, "uuid": "1ad503ea-6427-484f-a6f1-49bac5e1d5cd", "comment": "Malware payload (Gafgyt)", "value": "78fdd68a8a394075d40bf2d8c9c5f9c7442ee3d6f2d8fda3317977ba20e25f79", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868001, "uuid": "7ea5fa81-b956-476e-ad6c-44471366b1b4", "comment": "Malware payload (Gafgyt)", "value": "5b3a45f9befdf6babca6e1725d99c0c0cf7f12f8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868001, "uuid": "f0fc4e10-b1da-49a7-af00-c5bee4102bf2", "comment": "Malware payload (Gafgyt)", "value": "b6f89618549e1232e516ae2807139240dcb2e96e5f8c724203b42fea311855a108022ac3cd9ed7b07e9d8bac8b69c9b8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868001, "uuid": "0c934fe2-a047-450e-b949-d87b533551a7", "value": "T1EAB31845F8408727C2D327BAE78F479D3B36579467DB33116A38BEB42BC17892A29520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868001, "uuid": "3d58ec66-9130-4f87-a793-cf2396721cb7", "value": "3072:MSY+46m1qOzssYFPPKNy+AmkZrQAhPDCXFke:06mgOzJYFPzmkZrQAhPDCXFke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868001, "uuid": "d991c115-7a25-435b-a310-ba91e0ef6f1b", "value": 108417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868001, "uuid": "c3b2a42b-3e77-4203-82df-e4cd1dfdc1f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868001, "uuid": "29127375-80e1-453d-9ad7-f8a72087a45e", "value": "099856036b4f5414c761d4c03a4ab93c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "267a3653-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891103, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891103, "uuid": "a1b3cdff-f007-4c30-82c6-490cf834269a", "comment": "Malware payload", "value": "8be2d76cbddb1562ea3d35fd92f7879b", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891103, "uuid": "d2f8318c-70b2-4854-9f0a-c9e168fb5331", "comment": "Malware payload", "value": "7979dc19fa7f284aa8d71a869c4c9453769c575ae956cc360d16260afc2db99c", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891103, "uuid": "39e17829-06f4-40ed-b742-d9319ab13329", "comment": "Malware payload", "value": "27a4b01562abab635088a83e9f55f1e282d8cbd9", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891103, "uuid": "a8f8873f-9372-4cd3-9cbe-ab96e9dbd9cb", "comment": "Malware payload", "value": "4fe31ab1ccd59cc650f2cec237bdab4bed72b64279950aea806400b096882dd576aa626d6558f27c6f113e66243009c3", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891103, "uuid": "503cc415-1f0a-4635-899c-a7f217e23f30", "value": "T1D206AD86666187B1F09D3E7F25B213EA0DFE7F240A41DEA746D05A88CEE534C1F225E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891103, "uuid": "dbe4a9bd-309f-4dd1-b004-80d0e597d372", "value": "49152:MpUPbczduZ0Yx87nxODZGMFLnd+A1m4wcMO6XOf4BmCk2ZlZ:Mp1BB7nxOtFjfBwpOff4BmCk2Zl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891103, "uuid": "5838c2e0-b400-4aa1-94c8-81074d6a4440", "value": 3805184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891103, "uuid": "2b6954db-16bc-4bce-9669-b6deb38add0b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891103, "uuid": "c16db51a-a6dd-4dd3-a3dc-9a8d7db92689", "value": "SecuriteInfo.com.Trojan.Inject.1253.15353", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9e09cb6-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891323, "uuid": "297f786e-f733-48bf-aef4-cce1ef64162a", "comment": "Malware payload", "value": "85aea19a596f59d0dbf368f99be6a139", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "serenitytherapy.xyz", "colour": "#E4E0D0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891323, "uuid": "334e1f84-720e-45e2-b48e-3e098f6fd623", "comment": "Malware payload", "value": "7a95214e7077d7324c0e8dc7d20f2a4e625bc0ac7e14b1446e37c47dff7eeb5b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "serenitytherapy.xyz", "colour": "#E4E0D0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891323, "uuid": "014ee66e-5024-43f3-9250-f2ee49be2c7a", "comment": "Malware payload", "value": "9fd84c0780b6555cdeed499b30e5d67071998fbc", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "serenitytherapy.xyz", "colour": "#E4E0D0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891323, "uuid": "175f02f7-3465-4018-b61d-943995cef0ff", "comment": "Malware payload", "value": "52831a2bbc86a980d8778fe819b70db494afeeee828dcf0dd9a62fcf84d9462cd3f5403e43f3779387123f4152c1dd52", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "serenitytherapy.xyz", "colour": "#E4E0D0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891323, "uuid": "b60584c2-7527-465b-865d-eb9df7718355", "value": "T1830833DC5FD0BD82E4EC7BB85E1F7AABFB22A04C5CC06D56216856C26C12C531E1F52A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891323, "uuid": "b1e65f8c-664d-4211-8e6a-904f9699746d", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891323, "uuid": "d798fcbf-06bd-4b56-b67d-ad10aca398c4", "value": "1572864:fb6LBYCN9I9oap0lwmwBYQi2Jrydy/UgJnsI0SNcucgzxTMWIymNx:fiuS27WqBR3rEy/TJnsqN0QMWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891323, "uuid": "5f7bf22c-718e-4c41-8a96-e592e9acdb4c", "value": 78057262, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891323, "uuid": "2ab50a12-a540-4982-b069-d86adad860c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891323, "uuid": "3d8e2e50-34c8-4eb7-a0a9-157dd68a6bb2", "value": "SerenityTherapyInstaller.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f4208a0-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868032, "uuid": "a3764a7d-5b54-4c27-b712-d3a52793f4fb", "comment": "Malware payload (Gafgyt)", "value": "8e8ded4ea15550677e6be7e9c20094ab", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868032, "uuid": "52c99f9d-e22e-4c5e-8828-92aea663d0e3", "comment": "Malware payload (Gafgyt)", "value": "7b9a5f4e4ca17a44ef85f905e9a4dd087d5a73bd63090d54cddcfe5a67b94316", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868032, "uuid": "a7852c48-8e99-401c-8d04-3882e800650e", "comment": "Malware payload (Gafgyt)", "value": "4551847ffcd32fc2003e7a4afe1f6afe5f4088f9", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868032, "uuid": "dd37ec7c-6fd0-49f9-b058-99d6938c3ee0", "comment": "Malware payload (Gafgyt)", "value": "de5ac4fad6604dc3b3bb3d82f3a9c54a64643e6492f89d75917adafbda30fd67ddf4efd95ec70631636a8581a9a77dea", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868032, "uuid": "8712b455-0c06-4066-bf9f-dde1a1dd0afb", "value": "T129E3D733B2E18DFAC14652B026EFDEB29C31F1FE0672312B23A41D605F2D9D61D99A45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868032, "uuid": "2009a1cb-5c52-488c-b1ad-9359f1c36df3", "value": "3072:syUyaJ3LUQEWuZI3zKZPhJyphahZtwktUm+QVOXFNqOPPe:+3OI3mMphaDtwxm+QVOXFNqOPPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868032, "uuid": "95a31f08-2b64-4f01-b7ac-e46b44d3a108", "value": 144121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868032, "uuid": "22a1481d-c89c-40bb-92a7-c8eeee8cb6d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868032, "uuid": "691a504f-ce64-4b2f-b00f-10ee5df3cb40", "value": "8e8ded4ea15550677e6be7e9c20094ab", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33982739-ef73-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711898856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711898856, "uuid": "002d7bc7-4494-47c2-9622-50b360a15326", "comment": "Malware payload", "value": "be780defdc5e44b1d363b5e12fc8b8ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711898856, "uuid": "5f77298f-c0f7-4e99-a2c0-086e60de4f76", "comment": "Malware payload", "value": "7c636f1c9e4d9032d66a58f263b3006788047488e00fc26997b915e9d1f174bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711898856, "uuid": "464edf89-5691-4315-96eb-f793770d1902", "comment": "Malware payload", "value": "e7cae144f994eba4698fb092c20dce37555b204f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711898856, "uuid": "43ad2fb0-0408-451b-befd-d685d3d58221", "comment": "Malware payload", "value": "1ed6ab631bc15e15b40cd4d47003cda6b0476fcf82f693c28d32808731eafa16950f101eb089bc6ce170811bd9f471fc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711898856, "uuid": "4fb2774a-97c4-4c22-83c9-5a8f9ea04906", "value": "T1E6767C13ED9545A9C1EA92308A739252BB71BC484B3127D73F90F7382F76BD4AA79340", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711898856, "uuid": "549487fe-5848-445c-b541-3174dd113b7e", "value": "98304:kAYWyfYnSbISXTEqGTSoxelqEPvW1w2JcHsiw72DaT:1mfYnSb+xglqEPvWJJcMiY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711898856, "uuid": "63f2d0be-504a-410d-ae7b-b0c1ed08e6c9", "value": 7404291, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711898856, "uuid": "4acaa1c1-640c-4114-b9c9-a129c0ad5e12", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711898856, "uuid": "e030167e-ab58-4a9c-b2dc-6aff8d53318e", "value": "linux_amd64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "193b4b8b-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891080, "uuid": "9e233e69-6104-42b0-9ef9-bfeecdb7c3a7", "comment": "Malware payload", "value": "7416542f6f0a58c9ed2faab9e88b4e9d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891080, "uuid": "54aa2a46-eb18-4a3b-ac34-2abd01e68df4", "comment": "Malware payload", "value": "7e95691b9f6d0737e505da550ba627c734f796fdc05d7da7c424cc0a9015cc0d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891080, "uuid": "6424c830-41f4-45eb-bd84-7782bd4202e3", "comment": "Malware payload", "value": "778fb258c4f18c54629c418f13473f3acc97893d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891080, "uuid": "9b13d2d7-19c1-483e-9d4b-b573d8ba80b7", "comment": "Malware payload", "value": "1a112196e47f94fe8dcd5ca807d699b2375f97e31d73e8741e2b05751abbfac1f9b49651dba7ae2a6f109218e9372dcc", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891080, "uuid": "bac130db-95c2-4b61-b423-4905e4642e66", "value": "T1B716492B53F28BF9C11DC13982AA4A309533B267C33AB5FBD590C2655A018D45FFA7D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891080, "uuid": "9db9a46e-733d-46ec-8a81-420cf70889eb", "value": "49152:I9qhCxzT+WKjSXsE6wsGjXZq5+iLirfmiiiiiiiiiQg7Xgnct6NymxAiOYUZwLWo:ICQHsWPieI5tjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891080, "uuid": "2828a8b3-c5c1-44ce-8c61-0b1511731ff7", "value": 4243325, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891080, "uuid": "b62480bd-038e-46f7-8802-625f1a7fa278", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891080, "uuid": "164b75c4-74eb-450c-8b81-d29c11fa9b64", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105582.23418.9096", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8ac310a-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868128, "uuid": "11236a87-90c2-4f5d-8fb2-7d72176ede68", "comment": "Malware payload (Mirai)", "value": "a07661cb4f796eabeb714a1cc91f4b58", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868128, "uuid": "79f46b2f-58a1-452c-adaa-d00e5d08631e", "comment": "Malware payload (Mirai)", "value": "7ef190f05fe9be5d7f38bdb556fffdb7d9b5633ddf60cc43b98c09887a292c49", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868128, "uuid": "fe218d8c-cf4b-41f2-a592-3109d014cbc7", "comment": "Malware payload (Mirai)", "value": "11eb3294a067c8489dda2cc91db973f7af8c9dea", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868128, "uuid": "6966d639-f499-4ca3-8918-a19d769e518c", "comment": "Malware payload (Mirai)", "value": "2fe7301779824b1b109167f4b8d34cbd00f34031abe0403e96b8767e76dc32cd43da8ce94f4be1159d0e0cf97f87c5d4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868128, "uuid": "a41308bb-7756-4825-aa63-03b42a5dbae9", "value": "T1A6138D83C96E5E64C1154EB4B5345F7C5F23E958D2871FEAC8A182AAA003FDCF8192F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868128, "uuid": "af2e0345-0c9e-47a6-955c-cbffb873ec23", "value": "768:+j6OzWO7Ucaajcc6V6V6PMA2QM4ybFMu9RobI6foCUQPT:+j6OzR7DP8UUOQMbbFkbtoCUC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868128, "uuid": "d0cb4661-8d03-47c3-b1af-bb1f5872d9a6", "value": 44272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868128, "uuid": "bf4a5970-7d45-4e52-9e3b-1a7d18b1b3f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868128, "uuid": "f572abb4-79c8-4e44-a3f9-65a6d37142d0", "value": "a07661cb4f796eabeb714a1cc91f4b58", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08385ed4-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload (PureLogStealer)", "timestamp": 1711891052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891052, "uuid": "64b78ec3-8587-4d6c-920e-d4739a21d782", "comment": "Malware payload (PureLogStealer)", "value": "6c5f46d5d3cf870a0ed2d39823028259", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891052, "uuid": "3eed5ed4-78dc-4729-84b2-398841519a91", "comment": "Malware payload (PureLogStealer)", "value": "83c927ee7be29bc9002512ec371d11211fa96a5ec577336bca4fe789d9419104", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891052, "uuid": "5da84124-e971-4dc2-9d67-b02c6b912a81", "comment": "Malware payload (PureLogStealer)", "value": "eef0f2840cd454802b9e9fa116ef2fe6c1f954e0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891052, "uuid": "027c6386-05e8-49a5-8e70-3ca619950662", "comment": "Malware payload (PureLogStealer)", "value": "9c1362ae4c0acd03d912617c5b26afe32f0fe6db75b4a4f396d5a8507b9cf1c910508c8982298205046ddc4e6bc48f83", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891052, "uuid": "e5a6959d-7c8a-4e61-8635-19e8dd44373c", "value": "T125652338238CCB73CADDF1FDD8B5619C0770957AA805E7425A4437BA1E87FCA198126B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891052, "uuid": "c8e709ba-dda8-4441-bf19-d543feb8a19a", "value": "24576:G+9cqLksByMQYBt1wJ1PnvVJynB7f0oCNhlgsIhruUCJQWPcL6T3AAOJLQg7X04Q:M/CQY7SJtmnB7f0FAsIyDJWi3AARcXjZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891052, "uuid": "91f8e1f2-a089-4482-bca0-7f19981dd6d1", "value": 1512448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891052, "uuid": "82dc5b29-c66e-4942-83ce-5e9bab65d86c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891052, "uuid": "71f77355-487b-4931-9ef9-e3d44a6d5057", "value": "SecuriteInfo.com.Trojan.PackedNET.2723.7525.31949", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2165e5b8-ef96-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711913857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711913857, "uuid": "764bf7f5-43a7-41ea-8692-c4e3e8679206", "comment": "Malware payload", "value": "00eb35b724c1a499225b610dee2e1196", "object_relation": "md5", "Tag": [ { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711913857, "uuid": "a33ffd9f-f746-4935-ad9c-0a06611d28be", "comment": "Malware payload", "value": "853e7e3a5960f4222a87d60242ab2b5802e989c8856241c492840c4a9d935b10", "object_relation": "sha256", "Tag": [ { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711913857, "uuid": "3b45888e-f57b-472d-962e-d95170723c06", "comment": "Malware payload", "value": "c7661dab6e328635da74c4b6b8ed504e9d418540", "object_relation": "sha1", "Tag": [ { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711913857, "uuid": "c06bd088-2989-4c5a-b6ab-30debef7e959", "comment": "Malware payload", "value": "0cc1d763c57c64d8041bb2d1d818e56fbac39aa0d2a1d594fa44ca30209fe00d1e6c1e558c07a96f1d3c3c9b873aa377", "object_relation": "sha3-384", "Tag": [ { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711913857, "uuid": "cdb84e0d-29fd-4237-9e6e-ba2ea9ccf56e", "value": "T153D3AFBCB50C2DD9965F526ADD666DEE03A616228ECB74C9617DB6C32323332FD03805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711913857, "uuid": "ef9d6eb5-43d5-486a-972d-059139c76236", "value": "3072:Lh5CKBFBWp0uFZunmpJrd1HbcacEP766k+bGW8O8ijO:dICBWpRWgrPbne6DSW98qO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711913857, "uuid": "047b0b5d-d816-4294-af4f-6fe4ae0a6582", "value": 134064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711913857, "uuid": "957c4fca-cfc2-4352-a7e3-d83911e2fd75", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711913857, "uuid": "c2d0738d-fce8-4b21-80b2-d87e94e45b3b", "value": "Avanquest___SharedGuideline .PDF.rtf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a11ba8c-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867996, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867996, "uuid": "5c13beb0-91bf-4628-ba3b-bfcfa144252d", "comment": "Malware payload (Mirai)", "value": "03afd9f73e4aea49e39330f5a164445b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867996, "uuid": "3d18b55a-f26e-44b8-b809-1790a50d6ca4", "comment": "Malware payload (Mirai)", "value": "8562c9ad26ab3ad7d16ac43c9dcbf600d5319e5432d72dc684983cc5f64ff41e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867996, "uuid": "b0609d33-07b1-4626-9e18-7a727f57a425", "comment": "Malware payload (Mirai)", "value": "799e623d0ae128ead5127af02f86d8e3d082c1b6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867996, "uuid": "3e6a9317-4b27-4e90-94e2-194f343ff7bb", "comment": "Malware payload (Mirai)", "value": "75bc9686304c1d6bb6340d6505a2a687b0862255c769e4e09b79c77a54842a2cfec3d28bd0625f5ea7aea63488ba9503", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867996, "uuid": "02372208-b34a-4418-b3f1-69c86f3291ab", "value": "T128330885B9829A06C6D4537BFA0E43CD3B2573D8E2EE7213DD156F523BCA92B0D6B041", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867996, "uuid": "ea6e79b0-d8ad-4141-9663-7962f25ac02d", "value": "1536:WiKu/oYAEz66TCS9AKX5zX2fC5abnYEaXqO:tKsFr6jS9AKhhEmq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867996, "uuid": "d1596048-be27-4f1b-a77c-3b22ab96bdf2", "value": 54272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867996, "uuid": "9a781159-98d1-4be8-bbc9-580df5835236", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867996, "uuid": "47a9681c-64eb-4a87-9fe3-9f35ba9c849e", "value": "03afd9f73e4aea49e39330f5a164445b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b3d1aae-ef31-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711870495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870495, "uuid": "b1fe0383-c723-4dbc-ba3d-d1b8b64ec10a", "comment": "Malware payload", "value": "93b2a56dbc2bb2a4ee1b4c6f2873b50b", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870495, "uuid": "1a720b9f-0a33-4fe9-bfb4-05c137dde47f", "comment": "Malware payload", "value": "875a2f8b2193bd50ea6c835859aaa348f0168cd10235b632d7dd95913b6ffba7", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870495, "uuid": "94234659-e46c-4f14-a443-1b0f70e6ed6a", "comment": "Malware payload", "value": "017f9342cb4f7ad74ad56c4ee13e2a470004d807", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870495, "uuid": "7ddf7e51-594d-47d3-b776-df57f174ce9b", "comment": "Malware payload", "value": "9f4b0bfe8b560663847d88310e1f64f4af1582f5e87f0c59aa096bf57b23d46828f55d48359f9f082e34767f0543f0c2", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870495, "uuid": "e33f86f2-5df8-4354-8a58-7587b11f7b80", "value": "T1F694F787AB6595F4CC76C0788AA26623FA7178594334ABDB87508F131F23BE1D93E710", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870495, "uuid": "69f31c86-8ef0-4a1a-86f3-d43f0ba8aae4", "value": "cc12e3f394a2cfaeb0c35364d40acf00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870495, "uuid": "4f87b2d8-158a-416c-b80f-d0446344c6b3", "value": "6144:66kMYlOIa6VkctankhTl2DGl8HjZRw9w0UUCH:62X8anauZqd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711870495, "uuid": "4367602f-6461-4160-8638-3d0453bbfa88", "value": 423936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711870495, "uuid": "8ede1161-3fb6-4134-b3de-a1278380edb0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870495, "uuid": "fe27c20b-1ac8-4900-a6eb-81681a9d7fe7", "value": "93b2a56dbc2bb2a4ee1b4c6f2873b50b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e23b211d-ef4d-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711882828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711882828, "uuid": "48c4b93e-d79c-44cc-ae2e-386b3338f46c", "comment": "Malware payload", "value": "e39f3061f59db635fe95a901e81f525c", "object_relation": "md5", "Tag": [ { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711882828, "uuid": "9b76073b-0fb6-4319-b26f-9dffcce65d83", "comment": "Malware payload", "value": "88cb694c5de94a51337555c6af1c9182bf204b52b542823d5d15e8d2602ef63e", "object_relation": "sha256", "Tag": [ { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711882828, "uuid": "b3952699-caf6-4ee7-ab01-63db3040dcfb", "comment": "Malware payload", "value": "6a8d1fc18832c56c57c3f5a25378533e8509949c", "object_relation": "sha1", "Tag": [ { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711882828, "uuid": "39a91061-ee45-4429-b987-7611bab0b338", "comment": "Malware payload", "value": "095f92a6852ce453a1f50bb5a29851fae1c1508f91f2829a269f3092defe4edaf2a0d6ff3edbb26414ef4d10bb102288", "object_relation": "sha3-384", "Tag": [ { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711882828, "uuid": "d7f814cf-d09a-4ee7-b014-49d60c1bc0f3", "value": "T147B002DE5DFF041AD13F517B4517578361655484155873C90B4FE344093B6441D771DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711882828, "uuid": "9c283615-c949-4ee3-ba8d-fadb0a0155ef", "value": "3:vhjnNLoSj0aY6sttpvu+xdXLoSj0llXhvB+lFl0/ln:5jh0aY6spvdxh0ftB+l0n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711882828, "uuid": "549748bc-4b49-408c-864b-a82d5cf47db6", "value": 128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711882828, "uuid": "b8b57e37-3112-4ec8-9301-4c88d3ab62e3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711882828, "uuid": "e299399d-fd16-4d33-bf85-34827db08df5", "value": "$$Payment_copy.xlxs.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "780866ce-eefe-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711848719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848719, "uuid": "ef7eca49-0656-4015-8ec8-f1bd6382beff", "comment": "Malware payload", "value": "c7bf27619f4bc1cf69745c58b2b8a3eb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848719, "uuid": "29b7df4d-7792-496a-ac53-8e54eab59a43", "comment": "Malware payload", "value": "8a900e5cb55ce8819426bdfb7f2d8da6756c106980be0425c09684ee84f94ad3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848719, "uuid": "48abb220-dc6e-43af-bd5c-25b59a2f9a37", "comment": "Malware payload", "value": "53a7e2081e914254d62c342aad80b3ee20367113", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848719, "uuid": "fd2568a2-ffda-4f03-aec8-60decb8cdaa9", "comment": "Malware payload", "value": "d69c04a50827138d9e865188aae1de8d70a6fc6a3f0fd94761b390a4ba01e35faf5231597d968dd10e4f02173fc00949", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848719, "uuid": "926fa745-cd79-4dab-b17a-75101cef9e44", "value": "T1DD62D60F671744E4C30AD4B4C8E74B31B536BEB20DA1533E83A4E9760E717925B69E25", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848719, "uuid": "0b38d317-0d2b-4db2-828d-241f303cf541", "value": "7aa271442dec0795a10d597fde12b476", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848719, "uuid": "f61bf55f-cb84-4652-8327-5c2bb717413b", "value": "192:2BE4gYfbLd45TcloQYYd/fJjtFhTfBsYAmzXjL70we+c:2BEgMol9Y6HJjAYAY7heT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711848719, "uuid": "0a917c04-6552-4ae5-8f1f-1b1dc5ddd1e8", "value": 15360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711848719, "uuid": "bbcb1dde-cd1b-4af3-b353-6fbac438b7e9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848719, "uuid": "8c1e59f1-acd9-4a10-90a1-83ef87617f05", "value": "SecuriteInfo.com.Win64.Malware-gen.31311.24074", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f2e0715-ef4b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711881641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881641, "uuid": "95916a92-b01d-489b-849b-dab315ba2de4", "comment": "Malware payload (Mirai)", "value": "c950fd55eae04ec04be9eabb31bc9bec", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881641, "uuid": "be8925b4-d141-4d1f-83f1-1e2856aed848", "comment": "Malware payload (Mirai)", "value": "8bd211250158903dde500947d0f6cab75cfb620c22d8bdb1518dc59f4b87b604", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881641, "uuid": "30250ec4-e8d1-41b6-b724-f96892103bba", "comment": "Malware payload (Mirai)", "value": "577a1b22318d4e98ed10b486719e704f2716702d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711881641, "uuid": "aa7f29a8-c472-4003-98aa-16d862bae374", "comment": "Malware payload (Mirai)", "value": "92f4309f1b0e9b67bc459520b534e289d99b0ec854c12c47d95a6d89c4668f5d4c8b3188b668492752940f52acc96dc8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711881641, "uuid": "b25a9c2e-1a38-4d12-9187-5add67fe4403", "value": "T123330884B881AA17C6D553BBFE0E42CD3726639CF2DE3207DD252F5227DB52B09AB141", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711881641, "uuid": "b3b7922a-0bfa-4b3c-93bb-5f7edb420fcf", "value": "768:OBc/o5cKDrlHaauFgdH/5TvDzlE5DwL23/BXNvts/CVrQPDyqdMIn:O6CHl6A/1Dg8Li/BXZtlVUW2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711881641, "uuid": "2284d23e-fb83-4ca5-87d8-93ee9d5d0758", "value": 50660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711881641, "uuid": "0db710dc-c2bc-4764-9a60-f2a6afe080ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711881641, "uuid": "9bc7045f-96d9-4a5e-8524-08afd6a16d87", "value": "c950fd55eae04ec04be9eabb31bc9bec", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a7fe879-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867594, "uuid": "1957a6f5-58a7-4829-9818-88fa241cd67f", "comment": "Malware payload (Mirai)", "value": "c367c618c1f2edbfc460ac651a4b86e1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867594, "uuid": "a6d02ee4-c2ea-45f9-89d8-713a5dd4cd56", "comment": "Malware payload (Mirai)", "value": "8d0d36a4082b7746909a069bf7ea4d594f79b21183a36555c100a250d9ba672a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867594, "uuid": "1030e536-8a5b-4eb4-9c21-3a110d95e31f", "comment": "Malware payload (Mirai)", "value": "81c9d4cab5703547575929190ac1ed5200f51fa4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867594, "uuid": "d4752e47-288a-41bf-9492-ce23c14cae09", "comment": "Malware payload (Mirai)", "value": "2516b0358b0fd178559f59704e3f498f90c50c87d85a4ce27b74f82dbb73b2ff0f31e43629793b96b7bb22f6fdeaafdc", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867594, "uuid": "37b906fb-fc42-4395-82af-757a53e72d45", "value": "T1F7333BD3B800AD7DFC4BEBBA841B4E06F531B659549316379263FCA39C321948E76E42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867594, "uuid": "909194db-d23e-467d-9758-9ac4d20e28da", "value": "1536:FwQXqiVghpsAmHgWYKm8ifRgCpmngmCk73:WB1h2fHgWYKyZ0gve", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867594, "uuid": "d99fa1fd-551c-4977-a305-ed5d1be95373", "value": 51040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867594, "uuid": "c4e2a1ff-fa70-454b-a7fe-d87566f9c92a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867594, "uuid": "68c54603-7b34-4d93-aa73-d9c28ba72653", "value": "c367c618c1f2edbfc460ac651a4b86e1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9b46979-ef0a-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1711853957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711853957, "uuid": "1e10cf59-3805-40a1-98a5-51c31575d1a8", "comment": "Malware payload (RiseProStealer)", "value": "812d6f4f18cc4f924f9b2cd33b5dcd33", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711853957, "uuid": "bb58461a-3bed-4826-b0da-6f15b3234bdc", "comment": "Malware payload (RiseProStealer)", "value": "8d8923d6ab35b6b2a6192222307029e71a0e20af8a7fab9ed2ad01f35549df0d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711853957, "uuid": "727c15d5-529f-435f-8fb7-6341aba714cb", "comment": "Malware payload (RiseProStealer)", "value": "6d89878a4ec607ca8b7f37467627896401af9872", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711853957, "uuid": "f01a0612-97f0-4681-94db-ddf99fef6279", "comment": "Malware payload (RiseProStealer)", "value": "331f484a1c031ba8fcfa5b457227f8522f4690f1982286275fafc58855f730d2ad588951629e0f3015be475546c83f56", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711853957, "uuid": "95a23439-0fd9-4fa9-b0a1-24a217abed63", "value": "T18E6633B353551181C4F8C9319937FEF671F64A6E8A81643CF9E6EAC125938F1CA13A83", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711853957, "uuid": "f7137fdc-5fff-4777-a631-e6807c7d5df5", "value": "6921b1dcd9a9843f77a4c47c3178a4c9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711853957, "uuid": "780e47ed-cc66-4b9b-a4e4-2d4ad1a56421", "value": "98304:1zdkIB725ybMYl9FTKj1y/TzDTeitBmVeMDaR/I1UibvFG1k9i9ihddsVYDvtSi+:1/7G0MYlXjTDBmVaB9iO3YDvtL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711853957, "uuid": "25873647-de3e-40c3-9679-e5cbee1fadae", "value": 6705152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711853957, "uuid": "616ecf3e-ff2e-42c4-882e-336a60d58966", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711853957, "uuid": "b66f1a0d-eede-4a44-8fbf-236302e3a987", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5d19d4c-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868123, "uuid": "60d214cf-aaa1-4ea0-a474-88eb0729098a", "comment": "Malware payload (Gafgyt)", "value": "6467a081b9eb00b9ab7ff7d951b4de1a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868123, "uuid": "3e52b34b-b277-40f9-a47b-2b55995bdf2a", "comment": "Malware payload (Gafgyt)", "value": "94abedd50d254b10dfb2a43b1eabf34ea395e52da654e7dc36c5ec9605cf6b36", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868123, "uuid": "f0f7f3e2-f23f-470c-90db-adab15992696", "comment": "Malware payload (Gafgyt)", "value": "2168acbdbb36076c78d2532a4ef94bea68a86e17", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868123, "uuid": "fcc3b92a-5f90-4980-905b-c0c70db951a6", "comment": "Malware payload (Gafgyt)", "value": "8e6adba8c21a6815e6cf56c031c1051c6ff877b7aa20acd98b00987ae5fba640589568631160a81409a08dbf6f1e3874", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868123, "uuid": "863b2298-9030-46a9-9706-b90513e9ebbe", "value": "T1C3C3E731E8044B2BC2D223F6E79A829E3F351E9797973311573879B02FF27991E29524", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868123, "uuid": "3a631b89-8940-410f-a3e6-3f320b0576ea", "value": "3072:FDcYVLWKlAQTv+mYlbpl2m7/L7QsvmGugiNb:WYVxlAk9YlbH2m7/L7QsvmGugiNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868123, "uuid": "1446d340-7d45-4b60-80b9-7173a57f941b", "value": 125009, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868123, "uuid": "4e38ce7c-bb7e-470a-be89-3d8a7225b4fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868123, "uuid": "20fad13c-7826-42b1-948b-04cbfd61a7f5", "value": "6467a081b9eb00b9ab7ff7d951b4de1a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "078045e5-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891051, "uuid": "fdc36021-0e60-4304-b6df-2640264ed030", "comment": "Malware payload", "value": "fc57ad4235c4e8f0f1e1f1eeec44a0f3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891051, "uuid": "16f86113-6369-43c7-b7a0-868041acaa49", "comment": "Malware payload", "value": "980964dde4ed19e0bd3a2d66b92d6909b815477b470f4da9d38bc2f4cb6fb434", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891051, "uuid": "5ef447bf-e1a0-414b-9b6f-b47e90748dd1", "comment": "Malware payload", "value": "027e8237b52b8961387821cba492c3473240b110", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891051, "uuid": "afdd293b-2eee-4a73-9823-369724965aa0", "comment": "Malware payload", "value": "e6e7b3aa67217f737a52b554933b8e88e0218f686e8bac2345ff37c46e1527d583b1180de45c972be0ce0e3778134c67", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891051, "uuid": "57968382-e0be-4837-b4ca-ab61ae07da1f", "value": "T175064A2B62A1812AC1FF89FAC1D26F04C43BABF51B228DF7559F0FF489025D11E7A651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891051, "uuid": "05baaab2-a4cc-4563-8c3d-38eea99eb4b0", "value": "49152:09qhCxzT+WKjSXNJzLVI42Hdd8PWokdCvmmmmmmmmE/5vfH2xexG8JN6DB:0CQNVLe5HXSW55vfHkexGs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891051, "uuid": "b246bb93-4157-4cda-82b3-ddee9af5014c", "value": 3813228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891051, "uuid": "13038781-560a-41be-8492-b6fa2c842d8f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891051, "uuid": "cce65380-6aaf-4dc9-b7f0-0681c8e4127c", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105582.14176.32026", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "628ed3f2-ef05-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711851690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851690, "uuid": "730f3f10-833e-4378-8d30-1afe8e83ea06", "comment": "Malware payload", "value": "411164f7a98279c3e6f5e4ad77afda42", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851690, "uuid": "5e43e80b-7ace-4473-bf9f-18579cf21689", "comment": "Malware payload", "value": "9c138aab089945d812c4c921189f68ad8a086b87e5c0d63c13f3b0fd975cb4d4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851690, "uuid": "17f1347b-41c8-45f9-af00-ea1414444b8b", "comment": "Malware payload", "value": "8c989bf2a9fde537ecef01453a560409955c705f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851690, "uuid": "e91fd1d6-7059-4898-9942-e54ba13a4046", "comment": "Malware payload", "value": "43fc017388b6597341d58f424bf35c1bdf0dcaff32eb56110ef6bc215686a0bbc998157507cdfde1cc1e65c1661f7d46", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851690, "uuid": "8af94472-e759-49ec-a8a4-472f66e0f114", "value": "T11136123FB268613EC4AF1B7149739250593B7E61B81A8C2F47F0190DCF764621E3BA5A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851690, "uuid": "f86386ef-4be7-4185-a23d-33b9fc5e9062", "value": "5a594319a0d69dbc452e748bcf05892e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851690, "uuid": "77308e30-bc10-4c3a-a081-10d5f1bddba4", "value": "98304:ISi736goZEVN7Qex4N2UQiE2aCdh9ZSHlUlFJ04nHllxWu:vj8N7IABiE9CXfUGl44HllZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711851690, "uuid": "9da842a7-9b0f-462d-854a-d22686bb1d28", "value": 5132152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711851690, "uuid": "775f2e07-983a-44c2-ae82-889ef92060e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851690, "uuid": "6eed3d04-180b-474e-ab0b-dd411788d04f", "value": "SecuriteInfo.com.FileRepPup.14368.30949", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46e38c57-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711867535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867535, "uuid": "b30d1d0e-11c2-493a-be13-e506ea8dec71", "comment": "Malware payload (Gafgyt)", "value": "55a9a50643308712ee19ca5470778a6c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867535, "uuid": "c3b4ef77-1cfb-486e-a40d-36a8279ae258", "comment": "Malware payload (Gafgyt)", "value": "9ed242bfe1eb92942a8e4689ce569d9a529079cc00ce00776d7b3c171c7b2d67", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867535, "uuid": "69393f47-1b02-4fdb-a19d-86a6322e59b9", "comment": "Malware payload (Gafgyt)", "value": "34d8c603565addcfc78c8f7f28e85bee6f6fdde0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867535, "uuid": "db200a2e-9b2b-4b59-a162-94801164197d", "comment": "Malware payload (Gafgyt)", "value": "4c3f50cd4747a8cd5d5f99ba68c88fcf9aa578be8cace5e3404012786a672e03a05191b7ca0b09894a66ca8a1b3fe130", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867535, "uuid": "451be7f2-ae38-442c-974d-c5d3e893bb32", "value": "T1CAA3F972E642CA72C44306F102A79A6B0D21BE7B0A3A5E86F31C3DB49F334C97555F59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867535, "uuid": "01cc925d-9de6-4535-8587-620ace537c55", "value": "3072:SOGAEtZoGZKWl6u4YTnbHZbimmFVcqq0G27ZT:SqEtZ755nbHZbimmFVcqq0G27ZT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867535, "uuid": "74462ffe-ae3e-47c8-ab26-ad1322d86f18", "value": 104139, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867535, "uuid": "1c995f99-369e-4bda-8ac5-f05e00f82f82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867535, "uuid": "ee1d378d-6234-4f65-b43e-1d9ff3fa740c", "value": "55a9a50643308712ee19ca5470778a6c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7411972d-ef29-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867181, "uuid": "3fdaeded-47ca-4564-8bec-bb29941de8da", "comment": "Malware payload (Mirai)", "value": "dd80ff5207f33b03479354ddc1169099", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867181, "uuid": "9750aed9-7693-4a98-a513-174419f6acb0", "comment": "Malware payload (Mirai)", "value": "a1c14e99cc8490a4d503ffd660e2d881fa5d766a4288eea328f73bd8ee99078d", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867181, "uuid": "cdcd7762-6271-4409-9f6a-b451083307ba", "comment": "Malware payload (Mirai)", "value": "a369453c8a93c8d0fae1c0e0ee2d7d763902f2b6", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867181, "uuid": "5ef63cb5-0520-4c19-aa62-13e124fafba6", "comment": "Malware payload (Mirai)", "value": "6c38978f0e0e208d4373df5aa631117c40933e4f71ec94ce644659b447b97085868df6924423e23cc8f3c6f12bef3b1c", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867181, "uuid": "4306f942-6981-4808-a5a1-d1696ff971aa", "value": "T1D5334C432AD180FDC818C2705A7FA72BDD23F47D1235BA4E33947E226E1AD216E2B595", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867181, "uuid": "9d56a300-e2c1-45cc-9f0d-8ac5f3de1213", "value": "1536:OIA+bPy8vrGRqfGjdId71WUTuU0Nscgyw:OH+TyEySGjdIJ1Puocg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867181, "uuid": "7886a78d-b248-4c14-a015-fdab2e9b8614", "value": 50560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867181, "uuid": "da088270-8751-4560-b7cd-5eca2c6c8062", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867181, "uuid": "df3c888c-5e6f-449c-9c9a-ed1a1f4d258b", "value": "dd80ff5207f33b03479354ddc1169099", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48050cb7-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711867966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867966, "uuid": "8d3ba097-9cb2-412b-97d7-bdde64277208", "comment": "Malware payload (Gafgyt)", "value": "13216046dea11143a9bf9cec12db75b7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867966, "uuid": "d2bba668-fa93-45a9-9c16-23d3e6f89a94", "comment": "Malware payload (Gafgyt)", "value": "a1e0d6831e1045bd012857ec088b6b003df16075b3b409df8f0cf80ffb429672", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867966, "uuid": "928f9e33-f8ff-406f-9d35-5a66baff65f3", "comment": "Malware payload (Gafgyt)", "value": "8dfcf8c530d2381419f37b16d366e7c0b29de058", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867966, "uuid": "24ba1c8e-a67c-491b-a82b-c39f5f6c5095", "comment": "Malware payload (Gafgyt)", "value": "2487560f13fa4b9dbb7e4b27ea79daaeeffa750beb9e0da20923a7517174b643e0272ae7909ce42a8d7a1d857c7b071a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867966, "uuid": "bf48d071-7663-41f2-9664-d476beb6f356", "value": "T19604B63E7922AB7EE268827107F76F71CB5511D333929392E23CD6145EB224E188FB54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867966, "uuid": "1d68a761-2173-4d3b-ad8f-99c02e2221eb", "value": "3072:UhZRj5n9EmzUyMhM5hWTt5s1qAuhmv8uqx1BVnKoe:mjrYZM5hWJ5Lhmv8uqx1BVnKoe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867966, "uuid": "bb2214da-20bb-4090-9f8c-2808a54a9dfc", "value": 188384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867966, "uuid": "5fd94764-00c3-4a6c-b139-5ca8f62c9489", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867966, "uuid": "d1c20744-818f-4cb1-9b93-b746b0c24e15", "value": "13216046dea11143a9bf9cec12db75b7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09c0f9f3-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891054, "uuid": "349c89e7-4b3a-4d95-9027-5fcd75ce6b6e", "comment": "Malware payload", "value": "8b8bf031fff5aabbde0595360bc78c1d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891054, "uuid": "b97f12d2-a719-4010-8d69-a6833c604a38", "comment": "Malware payload", "value": "a23e875b94b3176ec9ecd11a298a8f1dcceaeb89b30f9cabba9c9c7450cc5ca1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891054, "uuid": "e3d85430-a7d8-44b7-80a6-98937a1dd326", "comment": "Malware payload", "value": "a9ca2a4771b2b77b5a7d25e90c4c35e97c841bc3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891054, "uuid": "2bad3d7a-5805-469e-a213-4d2e560fa14f", "comment": "Malware payload", "value": "e3f1bc16ffc911ede3361b4371c323e4e7104799acbd0ba4d844e2e4c1c6bede0e307b2d901a06c2bfbd80515b73dba6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891054, "uuid": "2e80b41c-f532-42e3-9f46-6884fcec5803", "value": "T149E29213BA409DFBCD0C073781F68A18653786746BA38DE396D8D5781A5E6C02E3FE85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891054, "uuid": "67c0210f-645e-472d-9e36-478ba789d9f6", "value": "768:hFGWfsMDCCX9i2fpftnnqZXEyo5lH5ngbQwq:KWTDJX9i2fpftnnqqyo5lH5nEq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891054, "uuid": "025f1dc9-842d-4a85-9ef5-44d8dd4c0e64", "value": 32768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891054, "uuid": "eb66b06f-d0da-4b57-a721-f958e8f41334", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891054, "uuid": "2da2e93e-a606-4e73-8570-9893eef45acd", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105582.25652.28373", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "442c1556-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867530, "uuid": "cea660b2-2e0d-4e52-87aa-cd0456642a26", "comment": "Malware payload (Mirai)", "value": "dff36fca0a66d771a65e3b13dba96cf9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867530, "uuid": "c98718d8-5bfc-458c-98b1-b84ea894ef98", "comment": "Malware payload (Mirai)", "value": "a24dd421d6ff4227c4ed5d22640cde97df80a49cf7e418150ffe03d5e25096d4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867530, "uuid": "7f65a4fb-afc9-4b78-b8e8-53509e3c0fc7", "comment": "Malware payload (Mirai)", "value": "92facc741e1152c5180046e9f7af2e9e118583e5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867530, "uuid": "b47b81d0-17e7-4345-8fa3-404d45effcea", "comment": "Malware payload (Mirai)", "value": "057a40367cee9c472ac39cd2e16dbc82794660050859354a6a2be6289c028dbc6a3640440b25df58b2c485d1dc7b96b3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867530, "uuid": "19562b78-4c2f-4c7c-a835-b4537f809716", "value": "T1C3B31877A4515FB3C045A5F125BA99320F12AC931B1F1A84763CBAB44B3B4CEB84EF58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867530, "uuid": "8c0b75e0-fd79-4cc3-b7ff-fd6a8f4ab201", "value": "3072:OwNUWqpCgYXlrSyWUfMNVMmH1cuEgv26uN/:OwNjqpC/G8fMNVMmH1cuEgv26uN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867530, "uuid": "618b5b85-9d1f-465e-beb2-e82d8cb61570", "value": 112634, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867530, "uuid": "60ce5eea-9a8c-4da2-94ec-0a8a81c8d010", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867530, "uuid": "50430352-698f-4357-b50a-628f053ba885", "value": "dff36fca0a66d771a65e3b13dba96cf9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6be23ded-ef2c-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868456, "uuid": "2ff0d6f1-930f-4988-a402-ab43cb5cf53f", "comment": "Malware payload (Mirai)", "value": "29a40fc2e5bcd633cb42d1b05cb675ee", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868456, "uuid": "56a2e418-cc41-4b60-b302-4a57b7088ce7", "comment": "Malware payload (Mirai)", "value": "a383319a28d50e8c280646dc53a2f33fec62ad69ef4948dae76a4f1f6fe2f159", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868456, "uuid": "e8ffa882-a0fe-4a21-8abe-ba74ece744cb", "comment": "Malware payload (Mirai)", "value": "c7f2681207baa7f61ee64191e648c2ba3da0b9af", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868456, "uuid": "e9aabffc-e6fb-4b02-886e-cc8443cffb1c", "comment": "Malware payload (Mirai)", "value": "649a8e37422fd683d2c111c7f889463d35ac8684b895536678e35c002cfd49c2fc152ef6d5d49870c3478ffd0375f869", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868456, "uuid": "c84731d3-e2c2-4ba7-92cb-d3e1e19c6d96", "value": "T1A333288273180543D5A21EF0353B17E0E7AFAAD222E4F349760F9B5A84B1E37A542DDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868456, "uuid": "30b5a4f2-d7a4-4cf9-8080-8ac17b150207", "value": "768:c0cl1FoqY/csAcZYlgbyn37suWz/4DTQVMeSViQiPaw2ufXOUNIMOitEPTt:n4WJYlfVDfVVFkap+NNIXXt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868456, "uuid": "a9ae3791-4ffb-4bbf-ae32-5d0f39cbd1c4", "value": 50276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868456, "uuid": "838e0182-38db-4183-8500-147c13d75d20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868456, "uuid": "a29e6934-9305-4645-8520-a0e28d2ca8a9", "value": "29a40fc2e5bcd633cb42d1b05cb675ee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62d28bf0-ef2c-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868441, "uuid": "2beb9fa9-85f8-449c-91e4-43027f694e0c", "comment": "Malware payload (Gafgyt)", "value": "fd7147c477fa1519e5a8e2b0b801a201", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868441, "uuid": "569d5ba1-60b9-4d5c-8fb4-b16aa4f7aa5e", "comment": "Malware payload (Gafgyt)", "value": "a46c6d0fe78a1d6bbe3526ee29eabb9e97a1edc681f8d8d5bd76694f749d9720", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868441, "uuid": "6d7d5e5e-0b7c-409a-8e50-20d09aa26a8e", "comment": "Malware payload (Gafgyt)", "value": "1e7496fe2dc67e06e5b440060ded5f71c6b3def8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868441, "uuid": "e2571392-0ffb-4057-bf34-231c607e7755", "comment": "Malware payload (Gafgyt)", "value": "c0fdd8376843fca64c020c1b6803f5d62032fd01b1aac259428f9b3a7b78fa34057c88fe93e3422dd45ea87ecf49d477", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868441, "uuid": "e542abb7-8f11-45a5-aeb3-224ffaabf247", "value": "T1ADD34A37E4518F73C0836AB11C6AAD310F1595D31BAF268A267857F08B4F5CA744EEA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868441, "uuid": "7c1d9c19-15c9-43ea-bd2b-299679468a60", "value": "3072:B1E8x83QHjqmgjHmhQXnP5hZttT5I7mAK0qW6MyoQ6:/E8q3QeXrHXnP5hZvT5SmAK0qW6MyoQ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868441, "uuid": "90d1f44a-d301-40bf-8b47-8a9b9955c678", "value": 140225, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868441, "uuid": "5bab8265-b373-4123-a0db-b8411032ce98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868441, "uuid": "96f931f2-27da-48d7-9465-12a15f19f5e7", "value": "fd7147c477fa1519e5a8e2b0b801a201", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92b389b6-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868091, "uuid": "c033c3bb-06b2-4dbb-9fdb-efa5e8d84101", "comment": "Malware payload (Gafgyt)", "value": "cbfb15415da733554bad9702306efa2c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868091, "uuid": "df153b70-29f4-42e6-8fee-83ee4b164afa", "comment": "Malware payload (Gafgyt)", "value": "a5dce5a673c46f7c6e11b8ba09bb9cb38c58640f04e9464fd444e7f477161202", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868091, "uuid": "331be861-a76d-4356-b431-84721faaf045", "comment": "Malware payload (Gafgyt)", "value": "efadf7b59129688c7e97bf7366eb2e839bb71914", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868091, "uuid": "e15622ed-0537-43f4-b8fd-c2a3423d8c1d", "comment": "Malware payload (Gafgyt)", "value": "2c869f0cd2f1e536fbc29b8ac300d50eb4a74834c63a993b018dcfdeb950647e2d725078ffaafe5cd973ade33fb1cc87", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868091, "uuid": "c9cba101-df44-4dbc-8e43-c0ff15f8a32d", "value": "T105C39417BB618FB7D81FDE33059A8902108DE58A12D96F6BB2B4C92CE74B94F08D3D54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868091, "uuid": "4862f89b-dc15-4fc3-970d-768353173298", "value": "1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpZ+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8ET+Dw8rmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868091, "uuid": "052eb713-76cd-4ca9-bce3-50793f015e69", "value": 126042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868091, "uuid": "bdc1953e-cafe-49be-bb7a-7faff1e112bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868091, "uuid": "8e7f1b09-ec18-4221-8d52-a81d87ea78c6", "value": "cbfb15415da733554bad9702306efa2c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bb0d723-ef3d-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711875676, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711875676, "uuid": "9f99427f-5a8a-432e-8c81-69ca0ec53f09", "comment": "Malware payload", "value": "032d358166185f2b0d91611f5a1ae712", "object_relation": "md5", "Tag": [ { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711875676, "uuid": "9b455d0a-2334-4a0f-895e-00889130be2b", "comment": "Malware payload", "value": "a7c0c487a30800d1366d6ba5029539526b842ed7b24d495155b165d55af3b3c8", "object_relation": "sha256", "Tag": [ { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711875676, "uuid": "d9e16da3-7f84-40bb-acb5-849ec382e469", "comment": "Malware payload", "value": "1a5dba85d183b574e0701dfe2ced7d9766dedd66", "object_relation": "sha1", "Tag": [ { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711875676, "uuid": "d406cd21-3a66-4355-98f7-d4dad5da5ec2", "comment": "Malware payload", "value": "38ffa8cfb0b58df744654f58402372a24cf969a288b4c0bdf588d63dbefedc035a77d62ac4c8de8026bdb391f81d9ef4", "object_relation": "sha3-384", "Tag": [ { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711875676, "uuid": "a0bcc65a-d97a-46f2-8092-87f93c6c24fc", "value": "T15FB002D999EF4C15D13BA37A55131F4EE25544541318F2450BC5638549376401F155FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711875676, "uuid": "3e590c9a-2422-472f-a85f-ba97d083a5da", "value": "3:vhjng79Fe6vj0axeDotpvu+xd679Fe6vj0llseDsB+lFl0/ln:5jgbeg0ax/pvdxgbeg0ktB+l0n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711875676, "uuid": "b671caef-8205-49f9-8a67-881d37a7be2e", "value": 128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711875676, "uuid": "f43f3dd3-414d-4826-9f53-b092641c7d4f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711875676, "uuid": "5803cfbd-9330-4e3e-b27b-476c03e56cc7", "value": "$$Payment_copy.xlxs.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53debd7d-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867986, "uuid": "2c25aeca-cbf1-470b-8206-e4f522fae3f0", "comment": "Malware payload (Mirai)", "value": "e19cd7461c9a8b7af142f277d16dbd29", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867986, "uuid": "accfca8b-8d3c-4fe7-b1f8-5d5ce264d5a8", "comment": "Malware payload (Mirai)", "value": "a81d4054412073c99c195ff9196786e9581e736e51cad13c712e8323d5fdaa29", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867986, "uuid": "c5cb81c2-2b2a-4648-8a57-9f141356e263", "comment": "Malware payload (Mirai)", "value": "bc748c2bc6e0aa9f22fdaba19f95bf0d142e8f6c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867986, "uuid": "d85af83a-9269-44bf-98ac-2a3191c814c4", "comment": "Malware payload (Mirai)", "value": "0a13155d6ba1716a6c7b6e0d90f973a682011f9d3caf5c4a18c53b96ec08f0df5449c19271248345ff88734fada9881e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867986, "uuid": "3e263b3a-da1c-4a6e-a571-d35f10337691", "value": "T167732A56B8818B21D5C412BAFA2E118E3313277CE2DE7312DD206F2577CB96B0E7B915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867986, "uuid": "ad80743a-1c3a-4211-a0ff-261e4cd018de", "value": "1536:nongAIloN9sbJfClQoP64QDi3ma+yMCCQhMJioAO/9B5aY65:/lcEB+Qgc23ma+zAO/Dch5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867986, "uuid": "a07d671a-08ce-4176-9060-4f25105769d3", "value": 79316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867986, "uuid": "fc3aa450-7b70-4433-b0d8-c413fd59ceb0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867986, "uuid": "0ca46724-3dd0-4493-a296-4158a304a8b0", "value": "e19cd7461c9a8b7af142f277d16dbd29", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "338a908a-ef31-11ee-a120-42010a9c002e", "comment": "Malware payload (AsyncRAT)", "timestamp": 1711870509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870509, "uuid": "01f6b228-9454-4063-8535-9d693289f15a", "comment": "Malware payload (AsyncRAT)", "value": "0f6a7323fb09a98ee204e42a4695dfd9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870509, "uuid": "a37e9a48-25a3-4b98-9efd-669b1c453cdb", "comment": "Malware payload (AsyncRAT)", "value": "ab3033f608fadc0fb8b6cea666c8abb2015833552a202ed8fa8b79541c08e4a8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870509, "uuid": "70488f23-9470-48c2-aa41-569596654f86", "comment": "Malware payload (AsyncRAT)", "value": "045f48f35159e232c0aa100e3fc566e0a4b4060f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870509, "uuid": "e62e6286-6377-4570-988b-e966169b1612", "comment": "Malware payload (AsyncRAT)", "value": "1fec1c82e22314a1388ffb57eb4a026637133c8748ad3d9491f5e0e2bb28daed3d2d5c4d3aebdad49dd65a37c47ed3e6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870509, "uuid": "34c28acb-7762-4b13-9601-8b6b1ca0ffd2", "value": "T10B232B0037E88237F2BE4F78A8F26145867AF6633603D54E6CC441D75623FC696426FA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870509, "uuid": "c2a4fe9d-3f2d-4ecc-9867-05d3a3265bd1", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870509, "uuid": "738cf6f0-d537-4996-9d38-81f4e3ef4d7b", "value": "768:0u7oVTltoJS+WUY/mUmo2qRB+GtCVnJtHuPI+zjbIgX3iot95ukpgiOQkwaSBwB0:0u7oVTltSQ22+TB3+3bfXSot9JpFod09", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711870509, "uuid": "4f94aa55-439a-41c9-aa3e-e27237e6106c", "value": 46592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711870509, "uuid": "eb8ec87d-4706-44fb-92a2-39c456bdbce9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870509, "uuid": "02d365c7-b9f9-4371-9d46-1747005e9c07", "value": "0f6a7323fb09a98ee204e42a4695dfd9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6301fb48-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868011, "uuid": "6bf43af4-c7b7-4db4-8ba7-58a5d122f839", "comment": "Malware payload (Mirai)", "value": "f9f851f1843523440a5ac59963f541cb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868011, "uuid": "376c1e57-12a9-45c7-bccb-241d52d64a5e", "comment": "Malware payload (Mirai)", "value": "b0bf755330dd760ec2a341b73a185e8859c16da6957115889866d40f5e4c1571", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868011, "uuid": "dfa77078-531f-43cc-8125-4c0072b0fd6c", "comment": "Malware payload (Mirai)", "value": "a9182ec67d38a1c2010ff111e29777c0fd673501", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868011, "uuid": "fed1ee87-effb-4d88-8d37-c5449036ab2f", "comment": "Malware payload (Mirai)", "value": "03b4c1323d4da7a5d67fa612f6ab9bed3ea9d6fd3d1e8d4e4009d868c42133b27d7d9b11ca5fb0c18a8f8ede21a867d4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868011, "uuid": "41b8cd12-aeb3-4c8d-8492-6245d4b34dd1", "value": "T11593B60ABF650FF7DC6FCD3746A9170525CC650B22A87B397934D828B64B24B49E3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868011, "uuid": "2bf15aea-3eb7-46fb-9fab-b2c77c110b2f", "value": "1536:7Vtl7c+XdPHHiKbEyIhpQVd1dgqjXgZV0xh/MIZVWB0v2YA453uI:7VtVXdPHCKbEenjXg1Io5453", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868011, "uuid": "1c58b66b-9c59-4069-b1c8-25345a5f0e67", "value": 93068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868011, "uuid": "b5e32e92-7748-406e-9ae8-42777ea603da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868011, "uuid": "43c03248-ad17-4fae-a075-c8082ae6fc84", "value": "f9f851f1843523440a5ac59963f541cb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a5a2446-ef49-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711880828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880828, "uuid": "b174325a-7d33-4b49-b725-37098afafb8f", "comment": "Malware payload", "value": "e7e13c1e74c6b2e53cde19c2f6642254", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880828, "uuid": "2a0c5d44-6d76-428c-998b-c1a09956f14d", "comment": "Malware payload", "value": "b59e827b78d5acbcaa7043eead3dab39926bf2a0f79725831cec90e78962de0d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880828, "uuid": "15b37d7d-f416-4727-a0a0-4225860e8e11", "comment": "Malware payload", "value": "dd8020d0a02e095dca3ddf2df4bf0c3d6378884f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880828, "uuid": "93a8f191-1ca0-407c-8532-0bc77a24f993", "comment": "Malware payload", "value": "ab826201cf22c39ed458cf214e21d139cd8f9f1831a8f22e358d8ea2824eb4241236786a1b5e8c00b1f6826afcb73921", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880828, "uuid": "09d41982-89fb-4c11-9341-c1527176c545", "value": "T1C2B53382C30EDE56C45474FA16132BEE033AE7112A7D877DBF476888FF74683292A591", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880828, "uuid": "e832aad7-5a27-4e14-acbc-6c2c331b0de4", "value": "5aa94c7fbfc01c9462c4d62e06efe88a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880828, "uuid": "87c43742-46dd-44ba-a8cf-4e972430e65a", "value": "49152:fQQX8xCXBT0GD4Dj/ia5xZyVHShCkQk7jsQlYXmw20k:fQFQC643qa5xZkLk1jsQlYXmd0k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711880828, "uuid": "5ead92f6-850b-4d55-9477-24456742f0ce", "value": 2310128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711880828, "uuid": "d2bac496-8791-4aed-b9a4-eed57909ead7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880828, "uuid": "83b181bb-2be8-4169-9776-cd216dfd2277", "value": "SecuriteInfo.com.FileRepPup.14794.26528", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe9e4871-ef51-11ee-a120-42010a9c002e", "comment": "Malware payload (RustyStealer)", "timestamp": 1711884593, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711884593, "uuid": "84597633-ad23-4a4b-bcc9-0f224c66af8f", "comment": "Malware payload (RustyStealer)", "value": "6784be19a5f870544c8e564c768eff23", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711884593, "uuid": "2e0567b5-309c-4417-8d31-d43a04154e26", "comment": "Malware payload (RustyStealer)", "value": "b654cb0e45016773edacb532cddfaa3faf677adbbb3bd7b61e31ed0ec23e0c91", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711884593, "uuid": "da77cee8-5708-466c-9035-a232bd437d5b", "comment": "Malware payload (RustyStealer)", "value": "177c876064ed39e9c06c187176f9f783833f1e1d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711884593, "uuid": "587b79ff-e687-4170-94bb-e87dea2f4157", "comment": "Malware payload (RustyStealer)", "value": "9e2470c7716240892dfa6ee16794e5df9817c58d734e73228526bcbe2bf44f71b8d0d8abe78b363dd56f6e7c2630bcaf", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711884593, "uuid": "685e468f-5277-4275-81a7-a23d9e4f9b90", "value": "T168E68C17F2A141E9C1AAC0B4866AA613FAB17C890734B7DF16E056212F677F06F3E351", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711884593, "uuid": "9a07103a-0ecc-4846-b6be-a208c43232c3", "value": "31d49736e8e51fb45e62a0baa554a5da", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711884593, "uuid": "c798e5ee-0e49-46e7-b902-6a0cb9cd665e", "value": "196608:q3e439qcLO4DOyvek4JELDzDSlYm4QV3j8rqNU:QdKErLDzDSCm4QV3j8rqNU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711884593, "uuid": "c7eb8b7e-3970-47c9-9b05-6a753124ab19", "value": 15250920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711884593, "uuid": "406438cc-15a4-4bc6-8955-1cc56c5b3d9d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711884593, "uuid": "56fdefe6-6d63-4ca1-a965-01a9182d52f6", "value": "SecuriteInfo.com.not-a-virus.RemoteAdmin.Win64.RustDesk.a.10715.12296", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a1a4b18-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711867621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867621, "uuid": "efbed3af-49c9-4daf-bfcc-89927fba41f6", "comment": "Malware payload (Gafgyt)", "value": "2bfa5d1cb17c258a5e34c1abcbd6bc89", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867621, "uuid": "64f9ee76-c845-4be7-9e65-ee7cca79da7d", "comment": "Malware payload (Gafgyt)", "value": "bb0ace1f379450a995fe7deaefc54d05606d704a5d3def0db1e63f9890e204ef", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867621, "uuid": "de1b9fde-b2c8-41e8-9fa2-778006cd3c05", "comment": "Malware payload (Gafgyt)", "value": "ac8b951aba38585a1943fa26e4e953936b6c4876", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867621, "uuid": "88c97610-3674-4a0d-85e9-221ebdb1de23", "comment": "Malware payload (Gafgyt)", "value": "9f315cae2a667a5e6050e124d81281ee2fdf706437ce937040b05317d0e7e4456e9278d9b9c6c037b798b725e2f4e7c0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867621, "uuid": "3e98bdbe-0837-414b-b754-da67ebe23313", "value": "T12604717AB7618EB7D80FCE7305DA4912188C968652E93FABB3B4C528E75784F04D3D48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867621, "uuid": "52ef5765-5256-4795-9c92-7e07b338b7b9", "value": "3072:aaF7XSy6Cv9RDJ5hCs1ZQhmv8uqx1BVnKoe:aICGVFJ5hCZhmv8uqx1BVnKoe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867621, "uuid": "8b45dafe-6bcf-41cb-866c-f957457fe5b6", "value": 188384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867621, "uuid": "6f46338c-edd4-4961-bf34-ec07f84ad97a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867621, "uuid": "d0562ac4-ded8-49a0-8a78-6627c622a963", "value": "2bfa5d1cb17c258a5e34c1abcbd6bc89", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14575380-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891072, "uuid": "b10af756-a541-4b60-86e9-17fbe9e9b3e5", "comment": "Malware payload", "value": "f5caa66782dca0ac93f87ceaa634888d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891072, "uuid": "ec220111-48df-4d85-9945-a557ff767a08", "comment": "Malware payload", "value": "bbba106e2287b8f965f8a25ff219e45d841d5071ca87aede0df761947ed6dc44", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891072, "uuid": "1c5d81d2-bb2c-40b6-8f75-5c2581e99755", "comment": "Malware payload", "value": "589efaf44bb2fcd45e3743ed9721d27e00dd1200", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891072, "uuid": "a5807be1-54cd-4df1-8227-aff77121bf0d", "comment": "Malware payload", "value": "4d097c91cd689f7a147ea5ccc193999b94b8e28a8d8154cba606749fa8ea5d1d5a9289e8423f75fd9dbe7af1a0c57bee", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891072, "uuid": "fce78691-f792-4b44-9b99-06c75f5cae8f", "value": "T172165C6F62BA8059E91DC236C292AB389532F06C8731B4DB43D4CE2D5FC15D27F3A694", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891072, "uuid": "c141a99e-31cc-4c68-b66f-a6420fd964ec", "value": "49152:h9qhCxzT+WKjSXnbbAKVTu6YmvuKAFFheHEzM60CPxAimD7Z6lWtB18F:hCQbbG909AU0/uQI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891072, "uuid": "12b5cbc4-b447-4594-a44d-58b7da570584", "value": 4247421, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891072, "uuid": "73f1f593-1992-4ba2-bc87-cc7ac73882c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891072, "uuid": "758e8740-d322-4e9d-808e-b2500d625b86", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105582.13132.3336", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "368b008c-ef3a-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711874379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711874379, "uuid": "0c7f70a5-bbdc-4ed4-ac10-8885b44cf422", "comment": "Malware payload", "value": "f078dcde5e5af939c9b02d4eefff5460", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711874379, "uuid": "45e5c605-2c12-4c00-9dd3-8a0194348325", "comment": "Malware payload", "value": "bbedd717bd42fc4eaa876a98effb67ffc5ccbed7d704b59191af53d75bba2df7", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711874379, "uuid": "8e2f7fe0-e034-426c-b4ae-31f59c8109b2", "comment": "Malware payload", "value": "5131d71d113c2669bd17d46723f29eae8b43eeed", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711874379, "uuid": "63128389-5305-4bf4-a404-5a0d4f5fc3a2", "comment": "Malware payload", "value": "b1dfc838a38e6b21796a300c08776668e932f4ecc5d427edfc153cdb0fd8cb50cb699df575b84d1b6620c640e0992c6e", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711874379, "uuid": "95dabf9d-6a06-4886-98af-6212e1bd3948", "value": "T195262357F261941BC9F2D23A30791739D13A8D18DB03AB462D4977BD28FB9C84F926C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711874379, "uuid": "757947b5-5cfe-4d8a-bc83-2fdf923bd0bd", "value": "98304:4aW555555555ATlqzJa6efffnRcj7jGPJq4zuM3Z4vyIs9g5uQT7DZ2+g7Fd3akp:4aW555555555ATlqzIXcXg0OsyfQH12V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711874379, "uuid": "d2672547-0efc-44e2-9df6-8f136e5847b0", "value": 4824547, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711874379, "uuid": "d3a7f950-d59b-4241-9727-623bfb8dd9ff", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711874379, "uuid": "cbf3d6fe-56b7-4e80-8e22-83025cc35e64", "value": "KissLand.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4def1d85-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867976, "uuid": "d9bb8cc1-7820-4018-ad93-65a2ccc4d38c", "comment": "Malware payload (Mirai)", "value": "21117edb4c592bd0587e1231255dda24", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867976, "uuid": "ec14cd33-2de7-4913-9591-dc0353c158f5", "comment": "Malware payload (Mirai)", "value": "bea2b4bff545edfa8fa1eceae9811d6ececb20a24a10408c729d11430c05c380", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867976, "uuid": "ecb74ed1-1881-4750-b1c2-699a2e0fbbc7", "comment": "Malware payload (Mirai)", "value": "37027ac7bd48d31d94870032748df260888b24f7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867976, "uuid": "dd524d79-ca0e-489a-ab60-448da8f41b84", "comment": "Malware payload (Mirai)", "value": "a7c274edd1cb8e39ca2f5fdb2a772b1785eaf7d3d4d17a535582b6c06bc2cd3d7d77180e203c2670e56605aa605eef22", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867976, "uuid": "430c106b-16b1-4bf5-b67e-0086f8dcef61", "value": "T1A3936CC5F683D4F5E89304B1213AEB339B33F0B52019EA43D7799932ECA1511EA16B6C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867976, "uuid": "56f4eb36-c775-4751-88c2-45c5f5d6712c", "value": "1536:xpmWc2AcighsZ82fJxfcHgHD1mSsM8meUigBQ9TnkISGtAdG0xZ:xpmX2riED2frfSgHhmLVUBQ9kVTG0x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867976, "uuid": "0eac8c1e-a84b-4f59-87a6-de5b95fb20ab", "value": 89576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867976, "uuid": "909e0272-0eaa-40e2-baaf-f88fc7e8a1ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867976, "uuid": "39b2ef4d-8fd3-40c4-933b-41875fdeb484", "value": "21117edb4c592bd0587e1231255dda24", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17bd7a88-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711891078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891078, "uuid": "03aba877-a9d3-427d-a43a-9ce5e5597e0e", "comment": "Malware payload", "value": "03c8b5b6839823ce8b19eecbfa71b96a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891078, "uuid": "e5023fe9-b203-448b-b034-336ffa482b85", "comment": "Malware payload", "value": "bff6ea8ab9571a29b967f37c3c9d42d94c0ac9926da07d405a45995c353c3a7c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891078, "uuid": "889cf1aa-e3bb-41ff-bb2c-4466c7393dd8", "comment": "Malware payload", "value": "247f571ec58a13302756cf2a2539c3ddc9446185", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891078, "uuid": "c2a24879-b887-4054-b74c-726782f5da53", "comment": "Malware payload", "value": "e991712953dac12dd676c651aefec92acbf1284a11ec1afedcf08cd6365e9a2811cd2598e5e3ebdb6054a4d45382e169", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891078, "uuid": "487e4bac-5997-4dc6-9b04-fc5db021ae5e", "value": "T1A4E28213BA409DFBCD0C073781F68A18653786746BA38DE396D8D5781A5E6C02E3FE85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891078, "uuid": "5024aa30-3340-40e1-919e-ba249175a37e", "value": "768:DF5X9i2fpftnnAwxMDCLZXEyo5lH5ngbQwq:zX9i2fpftnnAwuDIqyo5lH5nEq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891078, "uuid": "ad1aa057-2c83-4e04-b4af-8e8562f26f3d", "value": 32768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891078, "uuid": "714a9504-ff0c-4722-b7e8-bbd053de3e28", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891078, "uuid": "b6d46de3-4208-4796-9961-7c69cd202dee", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105582.31495.28481", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55819db4-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711867559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867559, "uuid": "3e4a3a86-b5da-4e45-9185-f36c6ecf72f0", "comment": "Malware payload (Gafgyt)", "value": "b784f46d336fcbff4c3208ba0175039c", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867559, "uuid": "4535273c-42d9-4ca6-b992-6be24ef1f6d3", "comment": "Malware payload (Gafgyt)", "value": "c02f1d748204d23ee9502c558e1f5c08e8fe1f0c95f12ac0ac0d7d9429dea0c1", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867559, "uuid": "31fb8b81-502c-4202-b502-4a9839d2a270", "comment": "Malware payload (Gafgyt)", "value": "159498b1aad42c223cc08e04ed532c6175eb4dfb", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867559, "uuid": "cdc65b79-18ec-4b43-bef4-85f4ec3e53e9", "comment": "Malware payload (Gafgyt)", "value": "a64f5c0b289afaef18fcc451420b75ef44375de7ce7d3bf50ef6f693e62d52f621b39b7d433b2b11f0957bb2ead41ada", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867559, "uuid": "4f55f9be-8140-46e2-9338-bfb59f0c7d0e", "value": "T1E2935D27B552C6BBC08752B42BDFEA615833B4BC0B32720B73D47DA52B259C91E6DB01", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867559, "uuid": "c2f1cd4e-3d1e-4a1c-86aa-ad75a51dee08", "value": "1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3hyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKRifUm/KWOXFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867559, "uuid": "88835dfa-852b-4036-b446-1a55a616b371", "value": 94679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867559, "uuid": "2565586e-31c7-4f78-9013-578f266d71cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867559, "uuid": "f15b7574-1e11-4c7f-8469-de59ea8d75c1", "value": "b784f46d336fcbff4c3208ba0175039c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ff7180c-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868087, "uuid": "40088f8d-f33e-41ec-bb6f-17f09dca2932", "comment": "Malware payload (Mirai)", "value": "d3f2541625596ad1e14d475c5ab52bf2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868087, "uuid": "b1a337cb-1736-4fdf-943c-10e0d3d30e69", "comment": "Malware payload (Mirai)", "value": "c65f86d5917025a8674bf9758870decd923ea2662d6611a1365303f4fe55fa26", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868087, "uuid": "9f47585c-cda1-48cd-bfaf-0dc93ce09ea0", "comment": "Malware payload (Mirai)", "value": "84bbccc973efd723eebd93c01eb9a996011c0001", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868087, "uuid": "dba23174-ea9f-4a6c-bc08-0e1efdebd18b", "comment": "Malware payload (Mirai)", "value": "64811272887e9af8634a76c7a1585d5758681b07e283aa25bbae0658854e75c01cac044c59cdc6bfebba1f4229ebda2b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868087, "uuid": "b9b9f6bd-f490-421b-9263-7016b7304d98", "value": "T1FB63A30F2E318FADF76D823447B78E21E659339216E2C641E15CE9111FA434DA81FBAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868087, "uuid": "0b1d5fd5-4537-4122-a38f-38e66fa4bb7d", "value": "1536:zZf502ToooooUs3RQi5JXsNTKtuAxCzV99Zpuk:T02TbL63pJXsNTKEAIB9zgk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868087, "uuid": "baf5590c-1fac-485d-8181-6db6e7e75de1", "value": 71788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868087, "uuid": "3efd8af7-f591-45ca-aeb9-1beac83d6360", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868087, "uuid": "97894eec-1016-4187-bb3c-8b8c0e048ab4", "value": "d3f2541625596ad1e14d475c5ab52bf2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52b24781-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867555, "uuid": "55c48a66-ee9f-494a-8c4e-03805164b56c", "comment": "Malware payload (Mirai)", "value": "bef5663c3dcfbc3e1866bcf74f3f7516", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867555, "uuid": "d816bfbd-1c60-4dd0-947f-e2c438d60d7c", "comment": "Malware payload (Mirai)", "value": "c78ccfaed2521b5bd28ab2734dca7b5aae28cd2657f945b2ad1997c500d2d849", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867555, "uuid": "ddfd20c9-bc17-4dbe-b483-98ddadcaee94", "comment": "Malware payload (Mirai)", "value": "0edfb6350c07e8f5b5f5984785b9e13dc644b3a5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867555, "uuid": "275cb136-6bae-4ec4-a616-feaa780aca5b", "comment": "Malware payload (Mirai)", "value": "e151934cbe30219fdb508d3848deac3826eb7b86e1d6551ab908f12182488eb19452fc950170383fe2190458362f517f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867555, "uuid": "51ddeea9-716a-4e38-a74e-a18a6de67585", "value": "T1B8633A41BC819613C6D522BBFA6E028D332663A8D2DF7217CD266F11378792F0E7B645", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867555, "uuid": "1f4f27f1-be07-4036-a4fd-8e80798b6756", "value": "1536:/NgPoiiWrhOlSuqLb4+3BpHISQaCOqCQIxXrFvM:/NgPsZxq/42pHIB/ABM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867555, "uuid": "b706b153-127a-4326-af57-21dd42f5c98c", "value": 72576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867555, "uuid": "b52f47da-8bc4-489e-b414-8e293ab855db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867555, "uuid": "e9158be9-02c8-44f8-b482-628ebce560f7", "value": "bef5663c3dcfbc3e1866bcf74f3f7516", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "456b5cef-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867962, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867962, "uuid": "9a07361d-457c-46d3-9775-54b4a35067ed", "comment": "Malware payload (Mirai)", "value": "3ae97eca92a8e01f8332a0594eb607f4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867962, "uuid": "87f562de-c71a-425f-9c73-bd47b82a3489", "comment": "Malware payload (Mirai)", "value": "cd43ddd5697edc6465417d6baae400c6263c615f4a4d998c777d68358a13eeff", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867962, "uuid": "711af4c8-fd85-4653-96dd-a9b733410a38", "comment": "Malware payload (Mirai)", "value": "890085871f328653ef149d1b5c50c69d7a3a7f53", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867962, "uuid": "c7db34ee-f799-449d-a0ee-fb2f7ad25097", "comment": "Malware payload (Mirai)", "value": "9bff4aa78177087581cc8571505fc42395175c3170066dc2b376a7c35cd652c3117c46f8085c2cd417e24bc12a385376", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867962, "uuid": "10b4e1ed-982c-4bcb-9104-9e5e8d148864", "value": "T14ED32A06B30C0A47D2632EF43A3F67D093EF9AC121E4F640356FAA899172E365545EDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867962, "uuid": "b47cfef2-de84-4135-ad59-07fc5837b759", "value": "1536:a0nwryWv6n/qZIccSH98z+xpnvTnNoIRF9Ugg97PMXgvAtId0DD2h/qvI8kpd/zJ:BWv6Wcy8z+x57ndngpPMVtUpdbBX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867962, "uuid": "1e999615-96dc-462e-a4d4-17a10b6e5d6b", "value": 132344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867962, "uuid": "7f0902c4-52de-4dcb-b280-cc2f74acb9b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867962, "uuid": "a9f976a5-9860-4379-ac93-57101df62c83", "value": "3ae97eca92a8e01f8332a0594eb607f4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "957fb4fe-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868096, "uuid": "17b0210f-e0b9-4a65-84ab-d8f1da572fb0", "comment": "Malware payload (Mirai)", "value": "7d8431807fdd1994d39051f6475cd7bb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868096, "uuid": "06a18b68-edb9-4972-9bc6-f0961b53b878", "comment": "Malware payload (Mirai)", "value": "cde53a53cee2e1ed2b59f45f76ca9abc22668f126ca2ec962f18d467221a00a2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868096, "uuid": "2af60612-5d5b-4c3e-9284-6cc6ca673163", "comment": "Malware payload (Mirai)", "value": "44d7ae390fec71b3f2ad6fa759458162ec468e8a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868096, "uuid": "3c8ffd5f-0380-4c03-abe9-653c830969d5", "comment": "Malware payload (Mirai)", "value": "44b9291da95cb9eb15cdcd25cceed8d0296e0f046309cffc1eb9cddbae62243cec0a32ace5d2cbc7305f8db5484f9aea", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868096, "uuid": "bbf93e46-47e3-4ba9-88dc-d35ff1516ff0", "value": "T1E5C3F772B804DF66F40AD6B604D38B227E30BFA70E631662B31739669D331D52867F49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868096, "uuid": "782be0d3-d95d-4bb6-95d3-b39f2c61d652", "value": "3072:L+YUpmc5hIof5UM7XgYjykKdZmm/QcuLB126DNb:LwU1of5UMPyk2Zmm/QcuLB126DNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868096, "uuid": "85d57337-44cd-4072-93f1-f96ebee08f60", "value": 118319, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868096, "uuid": "519be887-5950-474e-bdac-ece678c36c5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868096, "uuid": "0614d37e-89fa-4759-ab42-8cd62ee31268", "value": "7d8431807fdd1994d39051f6475cd7bb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15094027-ef61-11ee-a120-42010a9c002e", "comment": "Malware payload (zgRAT)", "timestamp": 1711891073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891073, "uuid": "18490dc1-632e-4832-bebc-f6606767d06f", "comment": "Malware payload (zgRAT)", "value": "a568e5c34415fea5f2a4c55dca93261e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891073, "uuid": "49daceb8-2ff0-4cfe-a2fe-741edd7985da", "comment": "Malware payload (zgRAT)", "value": "cf8bd7afba19441ccbda49f2de67963319fe44002b9ad3edf1f65eeee7f1be34", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891073, "uuid": "fea54b09-3e78-4218-bd69-cc71cd8d5616", "comment": "Malware payload (zgRAT)", "value": "84f1a3fc1c222565dfa0feb624c1dbb0d2cd4bdb", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711891073, "uuid": "aedb1f80-0dad-44eb-b29b-150545c7fba9", "comment": "Malware payload (zgRAT)", "value": "a81474d983883deae32e6524ebc23de116a9a851662d1e7d5525abaf36aa08b55c8aa5eae267cce62726c10a60243ac4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891073, "uuid": "ba17560d-89a9-46fc-b69c-4de9b3c0e890", "value": "T10255B503BB5799A2D1585737CDE7C41403BCE7A12313D63A398B2B691A437B74E6832B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891073, "uuid": "ff9df50a-d978-434a-93d3-163490fe4539", "value": "24576:dVgAihnHD8EylO+Ce2pMRnu5menhNcKT5p2HE:fHlsppMRnY5p2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711891073, "uuid": "abc03423-c373-43f7-8455-845564e7c757", "value": 1395200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711891073, "uuid": "d270e14f-73d1-4ffd-b1df-57a8a0ed11a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711891073, "uuid": "4fee68e6-a375-42ef-9984-7ee74cf2f354", "value": "SecuriteInfo.com.Win64.CrypterX-gen.5465.18949", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f672661-ef31-11ee-a120-42010a9c002e", "comment": "Malware payload (QuasarRAT)", "timestamp": 1711870502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870502, "uuid": "9c6d4e3e-6e78-4d8d-bc6f-74003a04ee64", "comment": "Malware payload (QuasarRAT)", "value": "db20b98d60f589570ba13a3aa5950f99", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870502, "uuid": "25ea84b0-be97-40ac-8c82-07642d29286e", "comment": "Malware payload (QuasarRAT)", "value": "d16edd8d973cf36aeaab6cd0989f2932478f2ab9e93b955216e031ac04116f2d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870502, "uuid": "eb038d88-2a31-4596-be7f-8c94ef50fd6b", "comment": "Malware payload (QuasarRAT)", "value": "6ee86cedd0d15d6e959f55b1dc6f6492d42613d8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711870502, "uuid": "d90a0483-c5f1-42f5-af69-dd1764380f5f", "comment": "Malware payload (QuasarRAT)", "value": "dc1c39bab111a694136f18a4b96ede1c24c86c3da076c6e849977ab348a80869722809cd7762e1c72447e44b7aef4a4a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870502, "uuid": "4e90d455-b303-46cc-b5d9-f9e254cf4f18", "value": "T1F6E56B0537F85E32E16BD7B3E5B0501263F1F82AF363EB0B5181A77A5C93B5488426A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870502, "uuid": "ef1b29bf-d7d4-4f1c-94c2-cbc813350346", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870502, "uuid": "4071c3f6-eded-4dca-9f74-22fcb577557e", "value": "49152:CvAt62XlaSFNWPjljiFa2RoUYIHzuMXOoGdFTXTHHB72eh2NT:Cvs62XlaSFNWPjljiFXRoUYIHzuM+V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711870502, "uuid": "e09da126-5c5b-4fed-91e5-a05128118824", "value": 3265536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711870502, "uuid": "8e332411-6ed6-4c8c-9bd0-725a17ded53e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711870502, "uuid": "9aee5c83-e639-4834-87e4-448efbffa278", "value": "db20b98d60f589570ba13a3aa5950f99", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68e36eca-ef2c-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868451, "uuid": "d6903762-5924-4f1c-a71d-5a1f482a0955", "comment": "Malware payload (Gafgyt)", "value": "bae0e98379384173932d932398b44b97", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868451, "uuid": "85031c79-a400-4f6a-9198-28126e7cb478", "comment": "Malware payload (Gafgyt)", "value": "d37137b55e489325f565ded0dd2adcdf8ac07810a8334abe1889e5e98a165166", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868451, "uuid": "442ed8fc-6c72-4578-9a55-62ebf2d0c9aa", "comment": "Malware payload (Gafgyt)", "value": "001b6a7545c947a487d7437c5da860e4ad1b7917", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868451, "uuid": "63a35335-63bd-4ac1-969c-7924afd217d3", "comment": "Malware payload (Gafgyt)", "value": "5304ff39c28c9afc731749fe54d2ff2b070eb5ee5a5736a408daf80c33396c3b1890c22acef59f1d947100653fff7e8e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868451, "uuid": "e2f90851-4e5b-41c5-9899-59ae27bc1e99", "value": "T1E3C3842E7E12BFBEE668863107F35F70879521D227A19382F26CD6181E7128D1C5FB64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868451, "uuid": "46a9434a-7b2b-4351-9111-238b4141174a", "value": "1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe4EdWfRZrmW+IFj:Ted0W0MZQHWd6RZrmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868451, "uuid": "f30d1e59-1b93-45fa-b9cf-330c3b5c7f89", "value": 125962, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868451, "uuid": "07d0d24a-4397-4667-800e-85282370a34f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868451, "uuid": "3e9d22b6-2916-4284-b641-b91e1a38f1fe", "value": "bae0e98379384173932d932398b44b97", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ea60c86-ef2c-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868460, "uuid": "5a03ef76-c4ea-4d40-be83-8f6b47dfdd63", "comment": "Malware payload (Mirai)", "value": "2bd988ca7c42d9a797ccaf9983cdd762", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868460, "uuid": "8349e5f6-eca7-4157-baab-b6cf3444aef4", "comment": "Malware payload (Mirai)", "value": "d6155a83e85dad5f8e66267c99bc6152dff5a5f53ec67ccd3b8cf1f1a0193b73", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868460, "uuid": "e551beda-8727-4467-ac08-ddc69de534a5", "comment": "Malware payload (Mirai)", "value": "5022771bda426ff133c826568d4bf9688e605dbe", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868460, "uuid": "d8ddc8f0-423e-4032-b9ba-7f7b577f06a7", "comment": "Malware payload (Mirai)", "value": "1e158387d30edf991dbbb582c2f46dc24b550f566120cb1032b3693b371b0e43621fe64244d04db70f0da3176459d5e7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868460, "uuid": "07be7b8c-d344-4693-9ae7-bd8a8a643e30", "value": "T17A44D5C7BD20CB21E5C7D436AD3D32A93E12973AE7DCB305E8105B1B2B8663B3669550", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868460, "uuid": "9871002c-6ecd-4e63-9f46-de43eee0b5dd", "value": "3072:CjG0UkUoMqamWRoPvII4ORLimcYiiGHnKgt+J:CjG0fUoMqwRoPvIFOhimWHKgt+J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868460, "uuid": "e17b9617-2976-431b-bab4-68ffa8043eec", "value": 264172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868460, "uuid": "e9d5456e-0392-487b-96f0-ce3868b784f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868460, "uuid": "368becf7-7d79-4320-9cb9-2c2524446361", "value": "2bd988ca7c42d9a797ccaf9983cdd762", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84a004f6-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868068, "uuid": "8ed5b7b9-da4a-442d-bca6-513d9394b537", "comment": "Malware payload (Mirai)", "value": "bc2fb94ed641b2659644a4a763a273ac", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868068, "uuid": "b37104b1-2b52-4058-b4b3-1c1e8f5879e6", "comment": "Malware payload (Mirai)", "value": "d8b4d8950ec1a3f812af69d261f452aae2b19d3bced8551f9178e40ca0c1bcf8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868068, "uuid": "8eedafca-5054-4f78-b7f1-60943d82d0d1", "comment": "Malware payload (Mirai)", "value": "8f9a7fdf8782c8b974c9456a8a57a7f0143a79a9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868068, "uuid": "144e9443-ce12-4739-ae1a-c3cda06b68b8", "comment": "Malware payload (Mirai)", "value": "0ded5661af3c759e35dd15f7ff41c7ddc8223cded058ae1e5ca4e0a6d56ea98f1d1b210c65c74b6fd2ed48ab94a43f5e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868068, "uuid": "367acd21-cb93-4d8a-b6d3-c88c2d9d88d5", "value": "T1A1330885B9829A06C6D4537BFA0E43CD3B2573D8E2EE7213DD156F523BCA92B0D6B041", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868068, "uuid": "2a7ca399-411b-41dd-b39c-75c26b4e6c2a", "value": "1536:giKu/oYAEz66TCS9AKX5zX2fC5abnYEaXqO:HKsFr6jS9AKhhEmq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868068, "uuid": "71de58a6-ec2a-40e8-9da4-56e3fca2b77f", "value": 54272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868068, "uuid": "406b86db-42e4-4ac7-b504-13334f72f5df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868068, "uuid": "fce645dc-1547-44c7-a068-15aafd49ed13", "value": "bc2fb94ed641b2659644a4a763a273ac", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5b3aa64-ef36-11ee-a120-42010a9c002e", "comment": "Malware payload (DCRat)", "timestamp": 1711872848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711872848, "uuid": "6e9fd51b-3eca-46b1-b25b-a649238c3d10", "comment": "Malware payload (DCRat)", "value": "fa06ade4e75719d34c16d8cb7c60ab41", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711872848, "uuid": "de6cccf2-e675-4f52-832f-5efcc63b300f", "comment": "Malware payload (DCRat)", "value": "d90e56489af6b2b4b051fcbdb07def1ff558a59619fb862429c77f113f12cadc", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711872848, "uuid": "10135da3-d94e-43cd-9eac-10aa5264d259", "comment": "Malware payload (DCRat)", "value": "cc1577fa6f00252ecf9e1afafda218285687d001", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711872848, "uuid": "35204c87-cca1-4ee0-ac29-4c94e87d48ac", "comment": "Malware payload (DCRat)", "value": "978f6671841ace8c5e2d5c2ee2d1764821bfe6693bdde1d94b632dc6d765558b79af16ba0183342a7ce93d077d31fcc9", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711872848, "uuid": "e306b9e3-e9cb-4e8a-8238-ae8a63c2aa7b", "value": "T120455A017E448E11F0191633C2EF498457B4AC512BA6E72B7EBA376F95123A37C1DACB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711872848, "uuid": "9274e89b-02ce-47db-8916-ba8ca0f3e41c", "value": "fcf1390e9ce472c7270447fc5c61a0c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711872848, "uuid": "684502f4-fc48-4c75-a091-f4d48c4bcfcc", "value": "24576:U2G/nvxW3Ww0t9diusWxpxvW+y8vqH8nvoy:UbA309di2pJW4Pnvn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711872848, "uuid": "28a66443-4c33-48fe-9aab-d89eb821742a", "value": 1201744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711872848, "uuid": "7a36c21b-73dd-4197-85b9-ba0f902ee1a1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711872848, "uuid": "a31c6ebf-0e8f-47a2-bccf-af097473c024", "value": "Minecraft.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20803f3a-ef42-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711877778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877778, "uuid": "4b84de4a-0332-49a2-aee9-b96c444a4fe9", "comment": "Malware payload", "value": "78cc5d8b8834bc724c1f74b6668a3179", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "keygen", "colour": "#610F03", "exportable": true, "hide_tag": false }, { "name": "PUA", "colour": "#514575", "exportable": true, "hide_tag": false }, { "name": "pua.keygen", "colour": "#48D800", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877778, "uuid": "b4b0dac8-6620-487d-8267-d8b78982d47b", "comment": "Malware payload", "value": "dc658a6d6d0361236454b37a93cfbfd31443ee384b448445effea64ebcb480ac", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "keygen", "colour": "#610F03", "exportable": true, "hide_tag": false }, { "name": "PUA", "colour": "#514575", "exportable": true, "hide_tag": false }, { "name": "pua.keygen", "colour": "#48D800", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877778, "uuid": "edc54744-705f-40c6-ad34-b1d7e87e8172", "comment": "Malware payload", "value": "839e6c557aa85aef9fcf5dda4487701c5be4a39d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "keygen", "colour": "#610F03", "exportable": true, "hide_tag": false }, { "name": "PUA", "colour": "#514575", "exportable": true, "hide_tag": false }, { "name": "pua.keygen", "colour": "#48D800", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877778, "uuid": "7eec687d-da53-4230-8802-eb988539fe97", "comment": "Malware payload", "value": "d20ed18204d75eaa41b02a594f60c4c7cae5f040a97b0391bf1b25a53661fa2119d77031b0c06f65d5b33941838e0732", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "keygen", "colour": "#610F03", "exportable": true, "hide_tag": false }, { "name": "PUA", "colour": "#514575", "exportable": true, "hide_tag": false }, { "name": "pua.keygen", "colour": "#48D800", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877778, "uuid": "3eab50f7-152b-489e-be55-3d640c1ea601", "value": "T1BD85122BB37CCA67F0C2463E8C27735019728E11F6159DBBB698702DACF6184A5B524F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877778, "uuid": "a6f3b098-a8aa-4021-9119-a67579d6a41d", "value": "4338cef3405f966f6177e3c8690d86ef", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877778, "uuid": "5e88b7bc-8d1a-4e48-85a2-56eccec42a3b", "value": "49152:AmU7sClfMuiX2ucphKtPoKfe7mua64QxIoRtiB0EqJ:aI9ptQKfDupRtiB0EqJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711877778, "uuid": "dd620680-bae4-4f42-82b2-9e740981ebc4", "value": 1820160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711877778, "uuid": "bf54e3f5-3343-41ca-ad99-8ba4d22b42e6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877778, "uuid": "b0939e8f-e143-46c3-80fc-bb5e0ebbc58f", "value": "RADStudio-12-29-0-50491-5718-KeyPatch.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aead98e4-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868138, "uuid": "585916c1-daf8-41ef-bf1d-d9f8db79461b", "comment": "Malware payload (Mirai)", "value": "cf483a6051308ac99defb2a0d46564e3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868138, "uuid": "4c220f74-8eef-4421-abe1-cfdc7776c32b", "comment": "Malware payload (Mirai)", "value": "e07511cdf30e2cf7a7f123e861a2e1b5d9d7098bf82e7182afe311a003caa8b0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868138, "uuid": "bd5f9c99-b777-4640-ae9c-c2385e46a82d", "comment": "Malware payload (Mirai)", "value": "98e2d3a529a24377c2ceae3a5db1cb7fad59e064", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868138, "uuid": "afd2ac9b-0a23-4fea-ae43-1dffe20a8b48", "comment": "Malware payload (Mirai)", "value": "7d9b1fd0676c40c3aa8b6e16ee4cb47aaf88071a0713e15a5149f328afa71525856b3a88b438593a006a7d971c471c10", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868138, "uuid": "ee6d9b55-163f-434d-9e5f-403a44d79a27", "value": "T165E329DBF800DDFAF80AE33748530906B530B7E145925B372257797BED3A1991863E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868138, "uuid": "7b8b7cb3-da63-4c4b-9654-4fefd37a475e", "value": "3072:jRsZDqhrvKbbWOftDA4EslibVrjbiJLnN+eAyaihka:tsbnfhAUliwLnNMyaoka", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868138, "uuid": "b4d3fd05-22b4-4ebf-9775-e2d50cc9381a", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868138, "uuid": "426d76da-d5e2-4f85-afef-b410077dd79a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868138, "uuid": "6486e313-8e1f-4488-9592-12f598cadb10", "value": "cf483a6051308ac99defb2a0d46564e3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b8fc06e-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867516, "uuid": "f6552f5f-9031-4ad0-827d-ab62e293d8dd", "comment": "Malware payload (Mirai)", "value": "92f5c800969489a709534e086bc37fb8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867516, "uuid": "b8b2bfe1-7642-4f4e-8c75-f2fd8082cb21", "comment": "Malware payload (Mirai)", "value": "e1bee75c743fb963acd9f98d070cc210468e7b270caf6ebb42db2e590e86f851", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867516, "uuid": "3c865e41-467c-497f-b489-ff3bc815c8ca", "comment": "Malware payload (Mirai)", "value": "d14d4f4a2ca02443282971f7783c8a517802c99c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867516, "uuid": "00c7b748-4f9e-404c-ac39-19d641151be4", "comment": "Malware payload (Mirai)", "value": "843f45d805f78506e1ee7496ced54c70180bc3a005d30ddf58b6e8f9e2efe809669826769069474806f5ded733d83d11", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867516, "uuid": "88326179-062b-4172-853f-fa0b10ce1308", "value": "T1B8D3C73B27170E23C0C950B101E74332AE75DE9B34B952D7AAA07D686F376843856BDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867516, "uuid": "bc516dd9-bd67-4ea6-b83c-a37e6b45828c", "value": "3072:3v8G4ZNBQTZiNPR6Iwd9g+pjAOhmm/QMurB12CGNb:RrUlkjXmm/QMurB12CGNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867516, "uuid": "8967fcf1-d487-4780-b829-38d7a657f872", "value": 130121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867516, "uuid": "bc4a3dd9-88d0-4e09-8d31-13386604796c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867516, "uuid": "d167b125-aee7-436a-8a14-4bb3b8a4d5cb", "value": "92f5c800969489a709534e086bc37fb8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f64737cc-ef40-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711877278, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877278, "uuid": "9b42c679-a3f5-40fe-bce1-bb550123eb5a", "comment": "Malware payload", "value": "e29e4001dfcf51bfd8df74b3b708d70c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877278, "uuid": "e2b12e34-ef90-4665-a143-8c7979120790", "comment": "Malware payload", "value": "e55b07d651fabf3129212cacbc3caf6bd347ba2151837aa60cc3140ace881a5a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877278, "uuid": "00636f49-49a2-41a8-865d-51e0f5c80b5a", "comment": "Malware payload", "value": "73775e9b22e24454c7ca787945f880a5d571a0da", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877278, "uuid": "c50a5c33-9f04-4a60-8615-43795206872f", "comment": "Malware payload", "value": "6c8c7a31526cc7d9d3feda14ea14782c1919817924a50a4e8720efa3c4358331833037db7c9c23a6cf511ad96369e16a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877278, "uuid": "b4e82279-98d1-4600-8f2a-661734e82137", "value": "T13BE623E694D521F0E9C74F50628A6BCE71D0F06A19BCB91C3EC61C838D36F9A054EE67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877278, "uuid": "96a00bfc-f81e-4ba7-8471-59524e34a485", "value": "fdbfdf4ae50aa5892f0a6f0eb10c8bbc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877278, "uuid": "f76ebf12-2a23-49cf-b488-d93c9c04b7f9", "value": "196608:TNG/pXsoMneLoJ8QO3zE6mAYn79nFiw4G3SVhgUaOx4YZgDqBNHrGw5+Ft4ruE5w:TNeD0u3Yn7NR4SyhWqCqBNLD5+T8uus", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711877278, "uuid": "a3f4b0bb-f7e6-4028-8a42-5951f429c5a2", "value": 14518784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711877278, "uuid": "bf69b944-2b5f-4b61-b541-63b828c4a237", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877278, "uuid": "76d4f1c6-cb42-45de-829a-3e852caad270", "value": "SecuriteInfo.com.Win64.Evo-gen.18815.29904", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30a21e1c-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867497, "uuid": "f0330612-faec-4b45-beaa-95544c14bf9e", "comment": "Malware payload (Mirai)", "value": "7fb2e6ca89e139c0a392f11723255aaf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867497, "uuid": "425ebbbd-f72a-4eba-a615-bf00c3257b6d", "comment": "Malware payload (Mirai)", "value": "e57d4d9eb2c27545a85d4b47e8fa5b39c67ef09a09322711f9f6124a7e4aed49", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867497, "uuid": "ebab7097-5aa7-4314-b810-f4758f2845e5", "comment": "Malware payload (Mirai)", "value": "61e2f2773718f75404d4193cae7eb039107d9c3a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867497, "uuid": "e90256e9-3135-4c67-8b21-656a5d3954c6", "comment": "Malware payload (Mirai)", "value": "591ead8f6e37f958bdf717286e00bf892489cb168afba557764c271ba39453ca5eb7aae96d1a9d27118fe5957f88378f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867497, "uuid": "2cd8f6a0-d6f6-4b75-84a9-d2e93fe9c361", "value": "T12A331994B981AA07C6D553BBFE0E42CD3726639CF2DE3207DD252F5237DA92B096B101", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867497, "uuid": "256f299f-611d-41b6-ab76-baccdf9b9a9d", "value": "768:2Yfq5JwcDOoRuZnaMaStTIQYcJ5QwG2CdgXULts7yXWVKC13tqzMI:HgBbSyQttG/dgXOtLGVBfE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867497, "uuid": "0f84e6bd-f936-4923-9cec-eb06eedc960d", "value": 50656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867497, "uuid": "2344115f-d767-441a-9f3d-99f74591b0e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867497, "uuid": "ca126ccb-a72a-4a82-8e55-0d50224b7d4c", "value": "7fb2e6ca89e139c0a392f11723255aaf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d5dedb1-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867492, "uuid": "483f975f-4c74-49f7-a8cd-283b7cf0d97f", "comment": "Malware payload (Mirai)", "value": "65e791bbc9ce40826fbf7dfcdd70ed68", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867492, "uuid": "69d82306-d478-4a61-ba9d-6fbf75584ebc", "comment": "Malware payload (Mirai)", "value": "e7171a7c59f40e40dcde66fad1eead55cdc430ede6f3f32815571bb8a5552167", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867492, "uuid": "d49f394f-c5c1-4171-9f41-6816bde0d23a", "comment": "Malware payload (Mirai)", "value": "a80fbfeaafa5eb7f81473a5e4e83cf26f7dc6d9b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867492, "uuid": "3b4d7112-7266-4ac9-ae6a-3188f4771670", "comment": "Malware payload (Mirai)", "value": "3f7aa745a8bf32a431be2e28fa50e2eaa7968863e8e4a731d83f55cc44d212132db9a46b32a7851689f93c5022560511", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867492, "uuid": "45aed462-35ea-4229-9e71-027e752ccc3e", "value": "T10604885E6E228F7DF668873447B78E25976823DA27E1D644E1ACC1101F2039E641FFE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867492, "uuid": "48a807fc-91d7-4f50-945d-6ec8f11bb98e", "value": "1536:Cl2JvnXPvL3QuchMJdDNsCK9H1R8cA2iQembSM+xV7TfF+hPyO0Hb/zIt/Y:Cgv/zcwZsCK9VRhAX+bShFSP0HbbIlY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867492, "uuid": "46ec186f-8b9a-45e4-93dc-b8d963191de6", "value": 173796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867492, "uuid": "ce6a4954-932c-4726-9aba-f4a2aac877ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867492, "uuid": "b6c010e5-4bd0-4da2-bf5c-90af82200486", "value": "65e791bbc9ce40826fbf7dfcdd70ed68", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72ed61fe-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868038, "uuid": "4d798301-7761-41f8-bb26-fba3d5504fbf", "comment": "Malware payload (Mirai)", "value": "d1b3c6b8202adf6ef9e3dc050086269b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868038, "uuid": "723edb37-6544-446c-adc7-b8cb2615ab5d", "comment": "Malware payload (Mirai)", "value": "e759f7899447bb8ea2f74b3aff09edb66c34847fd48fa4c38b8b30884cd4df82", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868038, "uuid": "a22c3324-8d89-4008-ab6c-78d5fddfea14", "comment": "Malware payload (Mirai)", "value": "f0ad80d662386702296d54353621d4a6b5abe94c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868038, "uuid": "99421c68-4618-4738-a526-a0821479f51c", "comment": "Malware payload (Mirai)", "value": "39a8821a1e7ced2154f1002006547bf65b71431e189a60592dd8cde36757a0b2f02b3c8ee5e53c2dbfdbda0301b28a24", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868038, "uuid": "0e8aebbc-371f-42d3-81b9-508845ea14b2", "value": "T1EE042A46EA404B13C0D627B5F6DF42453333ABA497EB73069628ABF43F8679E4F22505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868038, "uuid": "e7f0fdbb-88b0-4c01-af60-fef4a43e7cb6", "value": "3072:HK/lcjNbBLbcBCkoajwdyqkk4/T/6EBpZu/hJjogM/RHWT+M:HK/EBLbEloajwdybkwRBzu/XMgM/RHWL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868038, "uuid": "bd6053cd-545c-4d3b-938d-1b25a89d02a0", "value": 179805, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868038, "uuid": "3eef90c7-a7ff-4438-a20b-9449ca6a5edd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868038, "uuid": "9686181d-30f7-44fc-939d-a63841220122", "value": "d1b3c6b8202adf6ef9e3dc050086269b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9252d8c-ef1b-11ee-a120-42010a9c002e", "comment": "Malware payload (LummaStealer)", "timestamp": 1711861364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711861364, "uuid": "59337851-2f3e-42f8-af54-ff3fa21a19bb", "comment": "Malware payload (LummaStealer)", "value": "1c7d0f34bb1d85b5d2c01367cc8f62ef", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711861364, "uuid": "08bf0c7a-22f9-4fec-9066-96455b676342", "comment": "Malware payload (LummaStealer)", "value": "e9e09c5e5d03d21fca820bd9b0a0ea7b86ab9e85cdc9996f8f1dc822b0cc801c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711861364, "uuid": "6952bb76-5fef-4725-aa49-600330cdc5d2", "comment": "Malware payload (LummaStealer)", "value": "33aedadb5361f1646cffd68791d72ba5f1424114", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711861364, "uuid": "04c2e7d9-8e40-4864-b7cc-6dbdc57712d4", "comment": "Malware payload (LummaStealer)", "value": "5faa7b2f97f659b56efb5d9948019d3bf2f3bd7771aedc5a318d807d13a8c4e65d4f4764e80a4ca8fe99a507b5f672a4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711861364, "uuid": "28f2a614-c1a7-48b7-b0a3-4479d76bd217", "value": "T1316413F14AB5A662CC8B1EF2B570EFB4593CBF82920C55801943DAE41FE7346D782A5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711861364, "uuid": "916187d9-6ff6-4f25-8f3a-5aff76a46b7f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711861364, "uuid": "9c920dd8-cdbc-46bc-ab7a-6df4cfcb1cd0", "value": "6144:DFZcMaQk5oqtag00+wX3bSJxuI2Hc8PlsLNuPhRF1Ym:DFZg5Ztj00+03mJxmc8PfPwm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711861364, "uuid": "a414e001-5ef5-4983-bab6-2380d6c93c49", "value": 329352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711861364, "uuid": "0e3fa955-6d63-482e-8e8f-b7f5e8cbad44", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711861364, "uuid": "9373a37d-cbff-46b7-a69a-b168e5df6116", "value": "1c7d0f34bb1d85b5d2c01367cc8f62ef", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8185cc64-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868063, "uuid": "b1bea386-e4c6-4e7d-a28d-f1a10ea564a2", "comment": "Malware payload (Mirai)", "value": "0c58bb973ace2dbbcdfe6d3906bae7ad", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868063, "uuid": "3c74d8c2-fdef-45eb-8a56-12fa4db92382", "comment": "Malware payload (Mirai)", "value": "e9eee2614b5ced0bdcf7d15bd52d492b9a478722c64870d61b02253d062ad2e7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868063, "uuid": "1da81d1d-8cfd-4292-8974-dc4c1431068a", "comment": "Malware payload (Mirai)", "value": "0137dac0a2196925a847fb92e830a3082c9effe3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868063, "uuid": "bf6144a3-460b-4163-bd29-5dd4f8998c8c", "comment": "Malware payload (Mirai)", "value": "dce0aee3fe07882babef7c53824724c0c4cecb276be39c3273ee50b8f661bb657bacc27fdc3aae40b3bb4e73da90b715", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868063, "uuid": "3caf9743-1f3a-45cc-a9de-deacd7080a2b", "value": "T15AF30A56F8819B11D5C111BAFE0E128E37131BBCE2DE72129D246F707B8A87B0E3B915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868063, "uuid": "84600f01-d9ed-4bed-847b-49cf919309f2", "value": "3072:DEK0eKRyUNk2fatXGE7urjFjaX0/2oMIfOUo2CCr5/NQjE:b0EmratXD78xaEuMfOq7r5/NME", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868063, "uuid": "7fe39f7e-8f22-482f-b5e4-30f8f5dbad44", "value": 159484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868063, "uuid": "799f3ac6-22c4-4839-bc63-f17eb25421be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868063, "uuid": "eaab9be5-a0fd-4d59-a6a5-0f9fcd18372f", "value": "0c58bb973ace2dbbcdfe6d3906bae7ad", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a547fe9-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868077, "uuid": "0b68ca21-9686-4fb0-a92f-bb7f8e037ce8", "comment": "Malware payload (Gafgyt)", "value": "0b296e63cc1bb97aecca7a79649386be", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868077, "uuid": "528115b4-110a-42cc-9e91-804e08ed50f3", "comment": "Malware payload (Gafgyt)", "value": "eb5c0bd81e748472f85224bc510cd7a32d56db32b8d4f658eaf958404bd28f0b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868077, "uuid": "ec076d94-8b80-4fc5-8670-25cad0b19c29", "comment": "Malware payload (Gafgyt)", "value": "cb47c424a85e13f532608c22294feaa5224ab223", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868077, "uuid": "978d52d2-1a59-44d8-9075-7d49bca21a64", "comment": "Malware payload (Gafgyt)", "value": "8d02ee6c198326285ad9d284ea3bd5f747278307325f5492dad1b7d95023ba0aee1d8f267febddc6ecc665ff06c0c139", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868077, "uuid": "85cb98ee-0e7d-469f-a470-77f21fb49d89", "value": "T1E0F34905E6408B57C1E2277AE6CF824D33338B94A3EB33155938ABF43FC27995E26915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868077, "uuid": "0b1bd822-66ab-4e00-bfcb-cc62c211dd83", "value": "3072:T1g2/eINNlzx2kkQCMOaQcvBPYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/hYnydM/9MmFwfBxE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868077, "uuid": "6b611eaf-c3a3-4b4b-9748-e2c6cb0a9f79", "value": 159888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868077, "uuid": "41495ef6-c52d-4f2b-831f-bd36151e8ee5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868077, "uuid": "d2c1320e-260c-4f64-a204-fca813d1cd66", "value": "0b296e63cc1bb97aecca7a79649386be", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d0b51d9-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868082, "uuid": "0b12e381-8ddc-4c9a-866f-dac97e460245", "comment": "Malware payload (Gafgyt)", "value": "93867f082a1f2b12f885817e9e4ac4ae", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868082, "uuid": "3d591ead-cf03-466d-bb52-e86d0a5047fc", "comment": "Malware payload (Gafgyt)", "value": "ec3777f3145aa062c92d3f9a7dff1537e398ccfaebfba74b539acc4dec4ef7da", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868082, "uuid": "a105b0e1-820e-4784-800b-7e392baa90d1", "comment": "Malware payload (Gafgyt)", "value": "61b282d49092e7511392d61d1463bd0908fc2db5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868082, "uuid": "1d866840-845a-49b3-a20a-759d197c7a7b", "comment": "Malware payload (Gafgyt)", "value": "e33638c9670a5820371b4ff44388ce2c321800bb2c8f8b5776b1822d0d725d3443c73e70c4e3bed8a0aeaf3473d98370", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868082, "uuid": "b784f880-71a6-4cee-b1d6-0abee33ad934", "value": "T16FF33B24E4404767C2D313BAB69E866E3F321BF653CB33115A349EB41FC2B992D69874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868082, "uuid": "23e3b899-83a9-4e26-b6c9-f029d8739c08", "value": "3072:cyd1BPL8Z60aMnGjuog68Fi5L25hM1D1/6JrTRxmfQOYbr5Wn:Lz060auGjJ5L25he/6XxmfQOYbr5Wn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868082, "uuid": "e81bfb00-8aaf-4504-8742-5e3fe3f53f1e", "value": 170949, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868082, "uuid": "2d106d14-b00f-425c-83e1-599bcf478919", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868082, "uuid": "96b0b6dd-ff32-424e-901e-08b842d6b28c", "value": "93867f082a1f2b12f885817e9e4ac4ae", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60e29fc1-ef05-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711851687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851687, "uuid": "0f8386af-c17c-437f-9c36-e5650f866482", "comment": "Malware payload", "value": "bdb2181a1f7100fd2aeb24be403100ba", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851687, "uuid": "323eb05e-93c9-4001-aa38-25f3f92f2cfb", "comment": "Malware payload", "value": "ecc7152b763ce4ca25bd9ea5db94a9e810195714821a9345f9794cc2ec833393", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851687, "uuid": "06768559-24e5-4dc9-b5c1-efd49e6cf861", "comment": "Malware payload", "value": "907b199adc50bd5e952bc147f2ecb306a8cf2f7f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711851687, "uuid": "6a4459e8-c63f-46fc-bbca-1e3bd1c54429", "comment": "Malware payload", "value": "4989de1f98d43c6822502645106950e1b749002c5287bf33c92ffac43f396541aeaf1a5ff3046d6523ccd62936be7097", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851687, "uuid": "e4d958e3-4596-4484-8905-a7edc5329831", "value": "T1FA85CF24A2919E7ADF275AFCD04E49EB5A5FDDA313C9003327F196D1CA642D0841FE2E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851687, "uuid": "38b26687-8b31-46ef-93e6-5bc2e1253068", "value": "2cbb7a38a254150a220c55bcdea5f341", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851687, "uuid": "35784c5b-545e-4b6e-a4cf-192ee92b9fce", "value": "24576:7heWyrNEuwzYTgrTk2nqtOstrvdJT1R0iOYOrhUEiuQTt4TGadAanp:7heWYwzAgnTnAJrvdJEiOYsNmRCpWm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711851687, "uuid": "6d39c826-fc5c-4544-9bf6-5897f03a01fc", "value": 1728008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711851687, "uuid": "093c2f60-23b2-4422-a05b-f3fedfb5d7bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711851687, "uuid": "1d415a71-65b0-4280-9073-6d3e63f3c19f", "value": "SecuriteInfo.com.Trojan.Siggen16.24785.16789.5959", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77606bfc-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867616, "uuid": "8053a093-d6cf-4ea8-ac44-ee4304b50cd9", "comment": "Malware payload (Mirai)", "value": "aba7284f59f0ea81508aeb904a40ba38", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867616, "uuid": "c5caf6fd-4ae6-4234-b3ad-615e7fd985b8", "comment": "Malware payload (Mirai)", "value": "eef6b5c061572381d1e22124f600345da9edd1275f6244603db9858155d45c59", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867616, "uuid": "0f29c6d3-b47d-42fa-b3d2-02bd53eb330e", "comment": "Malware payload (Mirai)", "value": "f658148008671b7fb4c882d23d3ca5ca45fd3a54", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867616, "uuid": "28145275-aac6-4b16-997d-afe7a1e7f5b4", "comment": "Malware payload (Mirai)", "value": "65139cd836f31436e2591ad256c6f2220e308cb0003513a4907f8d829b673890ea3f061f21c2a89ae2a914da993457cf", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867616, "uuid": "aedc0169-6491-4964-ba44-769f86c7eeb6", "value": "T186A37DC5FB43E4F6E85305B12037BB368B33E079602AEA42E3756D32AC91511DA1B76C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867616, "uuid": "47099baf-f1d5-42e2-b26d-970b474b88b8", "value": "1536:BkN4jxOr3y8NLuGc9qzrKC2KwwwH3rZYeelztTfxUCn5S24IoTX:KGjxOr3+Gc9umCGwwH3FYv1FXQAoTX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867616, "uuid": "e5334c64-542c-4378-9f21-7bc0f0993a05", "value": 104108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867616, "uuid": "e6c6a02d-d158-4e2b-a194-a31389a5c3ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867616, "uuid": "28e2fb12-b9ef-4d03-a3ff-58922abfbe9f", "value": "aba7284f59f0ea81508aeb904a40ba38", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d61630b9-ef53-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711885384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711885384, "uuid": "7f921602-25a2-43e0-99e1-8d50662ca169", "comment": "Malware payload", "value": "bd83b191c03f3a76c213b049acb263a9", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711885384, "uuid": "29dd3379-5fce-415f-b778-61be143f7920", "comment": "Malware payload", "value": "f0dee56e9b81a05a2d94706484254f3e7bd6a1495c8db1c06d2b11518dabd8a5", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711885384, "uuid": "b848df00-ed31-48c8-9679-16e5a27adb59", "comment": "Malware payload", "value": "cc0de441fa55c4de8622adc8812f603e2c2e1c3a", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711885384, "uuid": "848582d3-b3e7-4369-bcd4-e588a54ad7bb", "comment": "Malware payload", "value": "db6b9e6bc5b436ae76ad7d8b9936571ba8fdddcf95e94f67b96b953dad6ff18be93b4550ceb4a9c8fc8bb6915aa46dd2", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711885384, "uuid": "ea70dc28-f37a-47da-91b1-be0dbcc3e476", "value": "T1F426230BF366590BC9F6D2772538163490768C28DF47BB8A2D4577BE24FBAC84B816C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711885384, "uuid": "aae9c921-62ad-4818-aa6a-fc8c9f812ec5", "value": "98304:N0suJIPS6efffnRcj7jGPJqRZuM3Z4vyIP4uqhHBq1AG++J/a793yD:erQSXcXgdOsyU4Jm1bfa5g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711885384, "uuid": "07571d95-d7c1-4846-8c5c-947ca089d16e", "value": 4821237, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711885384, "uuid": "0f943ced-1953-498c-b315-274bb3716e43", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711885384, "uuid": "328b0f16-909c-46c3-8c22-fa0405fa7f85", "value": "34568.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf80b6ea-ef35-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711872462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711872462, "uuid": "5eaa73fe-7547-4ca0-9e36-59d64b373c2e", "comment": "Malware payload", "value": "228a7d65e3c7a7f596bdbef07b9a9cc5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711872462, "uuid": "f88b7064-f3e4-474e-ade5-de6a64960e06", "comment": "Malware payload", "value": "f1f9a50986eeb7071e4ec0f7b1bf2c997e0f3ba6b64fa151b1413debc4799a65", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711872462, "uuid": "2a995520-570a-4b78-8aa8-16e9a4cfb0f1", "comment": "Malware payload", "value": "8b79b1d58fb91c5dd1a1c986fb414ad02b5a5ebd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711872462, "uuid": "793c977c-77e1-49e9-822d-b27d6a838496", "comment": "Malware payload", "value": "03551118b84299891e76908bb2193ba98fde70c8c746c0a8b3ccd8d980610fbc457413a531211bec78740cb1a77de6c5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711872462, "uuid": "f74d08e0-e981-424f-8011-90bfd4269764", "value": "T172938D57539024E1DEB6C5B9CAB1951BD3F2F0262760838F136CC5A60F63A523E1CBDA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711872462, "uuid": "29c4b6e7-939c-47cf-a513-3304d417965c", "value": "8a304f96f2e7748480fad425627b7794", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711872462, "uuid": "f5099ffa-5e19-4017-8171-065332ebc0d7", "value": "1536:tPaRxTza4z/ue3ihLzIfIc+iOIOdPwT5/K56h9RtOxqg3l27UmeqPxP9:tPEKML3ihPI1+i8dPwT5/K56h9RYxq0C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711872462, "uuid": "ef0e29fb-be06-4912-9db4-d43840f144a8", "value": 91280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711872462, "uuid": "23bb38e8-4b89-4e56-877b-c267d6bd7e90", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711872462, "uuid": "4270e44e-6dcb-4ef2-aea4-cbe56622336e", "value": "jli.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74b610d9-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711867612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867612, "uuid": "4693ca53-c9d9-4f8b-a048-344fbd3500bf", "comment": "Malware payload (Gafgyt)", "value": "82b0eeead34ae5267f434b6fc0e6e7e5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867612, "uuid": "0588e14b-b2c3-41ec-b733-22f7b64c3963", "comment": "Malware payload (Gafgyt)", "value": "f2b0e2d630297e4ccfd2f52063b3bf83b8a6c9d94e65d983eb0d7378c4c48d64", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867612, "uuid": "d07b568d-c61e-4792-8d1d-0dba93f83161", "comment": "Malware payload (Gafgyt)", "value": "bee4d6a6a6b409ec276f23c1d09aebb4335a721b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867612, "uuid": "36bdb13e-271d-48ac-876b-f26691ba5333", "comment": "Malware payload (Gafgyt)", "value": "c28cf11f06f5d24ff04ef5728195cdff0b131c821747609aaa8999db1ec660bfaf0c91c3cfd1362531e108a75824bdc8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867612, "uuid": "73c7f80e-72ee-4001-9337-5c2c937e8c99", "value": "T16BA30731A641C973D14305F211A7DF620D32FEBB1A6AAA96E36D3CB0DE360C1B561E5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867612, "uuid": "48e711d4-618f-4aa8-922f-e8bb1844ba9d", "value": "3072:gjtwgA6UlYzZveohR9kIEGfdGZmmFVcqq0G27ZT:gjhzt3mIEGfAmmFVcqq0G27ZT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867612, "uuid": "b507bb3b-a3c5-4547-8b6f-40dca9e42d03", "value": 100267, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867612, "uuid": "616cda68-4fee-4ebe-87e7-c257136c94d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867612, "uuid": "db342bde-9c3a-4980-bacf-c9000246817c", "value": "82b0eeead34ae5267f434b6fc0e6e7e5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40e074ee-ef3f-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711876544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711876544, "uuid": "866fbaa6-18f1-4c5e-b7db-131d689da007", "comment": "Malware payload", "value": "079d41f2e76288f1fdd65e72bf58c304", "object_relation": "md5", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711876544, "uuid": "9b7e81a0-b0dd-41a7-b79c-04c739dc490c", "comment": "Malware payload", "value": "f50ee33bab6abc93164577ca80f111d77595659842920d04a4d22e184f675d14", "object_relation": "sha256", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711876544, "uuid": "34ec1cc5-de82-4d70-ba62-ccb132feb9a1", "comment": "Malware payload", "value": "813e9eb112daa3e9501d3bddd8f78d44309bb598", "object_relation": "sha1", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711876544, "uuid": "89f7accf-2a48-497b-bd70-4c538936f182", "comment": "Malware payload", "value": "e688011a5156f224479488c6727a6e2141084861b227b2b3d224583253fb0d9ed38facea3490b582a89335300bb85004", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711876544, "uuid": "26265a0d-6ab5-45d4-a4fc-9b4449bc7490", "value": "T1C2443B4AA5A2F8EDD6AACC30C2678B236AF1748502116A7736C85B7C1E5BF305F1D713", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711876544, "uuid": "65845342-6172-48db-b4ce-d089e8ce957d", "value": "6144:r610Qc1ythkxUXAWe6/UDYUFR7Pp6YOuglLpn9:rXQc1ytOO9eNDrFBPstLp9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711876544, "uuid": "8789d587-dc53-48f5-8e79-9521236885b1", "value": 254520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711876544, "uuid": "6d43a5cc-c7b6-4835-ac6e-ac342f3d298e", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711876544, "uuid": "b72add7d-5fb3-45b8-9a5e-826a2805ac4e", "value": "liblzma.so.5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "808291c4-ef29-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867202, "uuid": "49d42f35-bc91-4fe1-967b-66aca9fef2a8", "comment": "Malware payload (Mirai)", "value": "ea755582e102f04973f956e892c2075e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867202, "uuid": "aa7b9a7c-d6db-4c99-8163-af8aa80ad7e0", "comment": "Malware payload (Mirai)", "value": "f6de5b7f43cdadea8bfbbece011c3a5e3701e98c7ed008618a7f5bd864e66ec9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867202, "uuid": "c22556a6-20df-44de-961a-86d73621e534", "comment": "Malware payload (Mirai)", "value": "5902dc86c8dd816f4c9c8d87ba2691a7a9b2fdbd", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867202, "uuid": "cdb21162-baa0-43cd-9120-84f4ffbbc98f", "comment": "Malware payload (Mirai)", "value": "2d24bd6cb9b532f216c1b63621ea9f902852a3608eff6dee1cc16d391315cd53d7260fd9007cf2dd642b74af1b7a9674", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867202, "uuid": "1fb5310b-ceb5-4536-98d3-eaeb7145a7da", "value": "T1BF230941731C0447C2661EF0393F17E1E3ABAD9231E8B289751FAB4AC5B1E339546E9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867202, "uuid": "76dca482-d37d-4ff0-9d9b-f0700e3eed46", "value": "768:tTs67/ZjwpdA5D0x47xCmqKaNh981K9pQ6IZ/HBpCS4OpOXVINqMKSJMIX:VE4D0GxwDh9CiyZyiKVIQMddX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867202, "uuid": "981bc096-6282-4905-827a-736ac0464f35", "value": 47080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867202, "uuid": "50b263f9-3920-40ae-b3b3-613b41c74cee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867202, "uuid": "eec6a6cb-ebb2-4569-899e-9464aacd019e", "value": "ea755582e102f04973f956e892c2075e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad009139-ef40-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1711877155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877155, "uuid": "2b7410a1-c6a3-4177-ae1b-417fae4ecb95", "comment": "Malware payload (RiseProStealer)", "value": "f1a8b73dd1be2c2325b5071ad1080298", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877155, "uuid": "30d2d1ca-3f3c-4f68-8f50-90971e431f4d", "comment": "Malware payload (RiseProStealer)", "value": "fac6ab1c8c1c5857b5ba00298d28f05100af6277808ef53bd2cacccd190ed52c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877155, "uuid": "f57b6585-7379-4a20-a101-a932eb3dbc7a", "comment": "Malware payload (RiseProStealer)", "value": "e3f452bcc7595339ce5339e5bb0690f6956a233d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711877155, "uuid": "08a15bcc-1037-43ea-a9ca-df81182a3c39", "comment": "Malware payload (RiseProStealer)", "value": "589b2ed21ee03b6ae63efa27562d97e97a2a46d9e0cc842950e0a260123ab508b899688184654b5c8bb6724eb489978c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877155, "uuid": "99c86c91-36c2-4edd-876c-8662b52808b1", "value": "T17B6623275666011DD6D5C836C937BCA272F503669B82AC3CA8DE6EC532C35B8F303997", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877155, "uuid": "8c8142ee-5ed1-4783-93b7-dfaa618bb13a", "value": "6921b1dcd9a9843f77a4c47c3178a4c9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877155, "uuid": "19d82c7c-a95a-4ba5-8536-78f89ad9a2ca", "value": "196608:t6uEo0RThVjH2vto/rFnTo7nz2CSr3Eca:8uET7jH2vejBTgnzUrUj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711877155, "uuid": "2a36c434-269c-4682-b3a3-75ff7beed717", "value": 6728704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711877155, "uuid": "0471e717-111f-40a4-8b4a-fd49301411d1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711877155, "uuid": "c9ee1cb2-8428-4c44-bdeb-736c8a0ff1a9", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fa10d65-eef5-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711844867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711844867, "uuid": "665bc624-4d92-4b31-be4b-40a0c6cea2a5", "comment": "Malware payload", "value": "430a9b6d2d174db044098b338d094c7e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711844867, "uuid": "e87352ba-7b01-43aa-91ce-99c93ffddacf", "comment": "Malware payload", "value": "fb031a2b0c0c513ac7b8ad48901db6e07f9ff1bf3fff062514e108824e122a5b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711844867, "uuid": "6865d8b4-aec1-46fd-b604-2eb1237329e6", "comment": "Malware payload", "value": "ccec8f196bb64d508676d833818f331f6dc5f7dd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711844867, "uuid": "7f779f0a-802f-41a0-aee2-a3296090c934", "comment": "Malware payload", "value": "2b07fc892219a7487965b731501fe8747be007d9bb24b878e1c5d701590471f753416b0c6e3ebc3044f3c12e567f40df", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711844867, "uuid": "48ddd5e7-0897-4881-a503-b626980caa77", "value": "T179B3403C6BA82763D2BBD7B905A14001F3BCA0DE3231EA5649D728CD655CB406ED772B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711844867, "uuid": "78e4810c-a626-4794-b18b-b3df2a7d341b", "value": "1536:8rNcwku8t8d2GsdiEZ1henY3/+7P03Trk1:8rtld1Es7P03To", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711844867, "uuid": "2d2d7804-9926-4643-a08c-ddb1794b77f8", "value": 117248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711844867, "uuid": "e2ca6445-7e18-4d6e-bbfa-c38036df5458", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711844867, "uuid": "47033015-3b8e-48b4-855d-e87b604d1467", "value": "SecuriteInfo.com.FileRepMalware.15586.15105", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33e0c680-ef2a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711867503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867503, "uuid": "3bdc388d-1333-4982-82d9-1425c1e8eb4d", "comment": "Malware payload (Mirai)", "value": "7a6460359788035f010c107b67b0442f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867503, "uuid": "894b10a1-0ef9-4c31-a95d-ca37c57fa610", "comment": "Malware payload (Mirai)", "value": "fbb1bfd5738130542d642e72d29e85b768ed6ffa34b45ba39cd078d85492ce89", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867503, "uuid": "f926dc0c-62df-4ab7-b5a5-273dbfd7515c", "comment": "Malware payload (Mirai)", "value": "fc0d9a1a6c1b70fda95ac2464f50cbcf35d2f4be", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867503, "uuid": "f895db50-4a13-4d5b-aef3-6e3046603b8f", "comment": "Malware payload (Mirai)", "value": "a18310a42922b0b9055e898f0825e285fb9583a1c0a77c3845a4ab9dd64848e4746621c6b0f78deffbf74a1f68235fd9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867503, "uuid": "3ced21a4-d682-42a0-8136-3be07c3c9c1e", "value": "T15E13E642B8929A27C5E4637ABB6E018C336173E8C2CF7317DD205B15BB8951F0D67B81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867503, "uuid": "4af986d3-d782-4446-9db7-b8e76da66f5b", "value": "768:i9FPKc7xorhu0QUmzIMmMyB1SWKpcbWAtQsO/LFXsaZyXd6mqPoUgNzbs:o1xIMWYMB1bz8zJsaZ0q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867503, "uuid": "e04d0e62-a0d9-4084-8127-563ee98b25df", "value": 41520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867503, "uuid": "370d5ca2-668d-41b7-91eb-398c92a7905e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867503, "uuid": "c4b7122b-6974-4dd8-918b-db997ac5db4d", "value": "7a6460359788035f010c107b67b0442f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7771a928-ef48-11ee-a120-42010a9c002e", "comment": "Malware payload (IRATA)", "timestamp": 1711880501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880501, "uuid": "c6960371-8020-45fb-9551-c6a10ec154ff", "comment": "Malware payload (IRATA)", "value": "27463359a17477a4710cf71990313549", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880501, "uuid": "e7cc1234-a8d7-4199-9455-2371c8ff77a7", "comment": "Malware payload (IRATA)", "value": "fc0d4fe02de6b5f43663ada7c6de1794b9b1e4ef0b4a96e61b4f109164b82515", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880501, "uuid": "8d7515d4-442a-4482-8c6d-3203e3feebd7", "comment": "Malware payload (IRATA)", "value": "beae04865c63bbe61e8fb61fd2db3aae1c8170af", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711880501, "uuid": "4cf5c661-8f71-4b54-bf1b-ce4ab9c00267", "comment": "Malware payload (IRATA)", "value": "03afd6b732403323e36b217b44a6a9bd9d8ec45865ce66086c8ad9fc7a135e9290f284419aa4f520ee0167e7fc9747f0", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880501, "uuid": "91b5c31c-94a7-4d27-8bdc-3a34ca7ce472", "value": "T116951203F379A91BC876D1723588163A501B0D35DA42FB4A2A4937EA38B7DEC4BC5BC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880501, "uuid": "4b197e05-525b-46ee-a7f1-c4018ff7edfc", "value": "49152:9sKkkpeXXOCn3v+VpQ2HcjISMgIhkHJYnxg9pXIarTiIfcLp:fkkIXe+f+VpQ2H7hg1i+9pXIX9p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711880501, "uuid": "d5a9dc3d-a949-4fce-9570-bb970055ed7d", "value": 2056830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711880501, "uuid": "5e777bc5-dfaa-4d9b-9297-b521dbf4683b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711880501, "uuid": "62283822-faf1-412a-9080-578d7b938188", "value": "app.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81bb5378-ef29-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1711867204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867204, "uuid": "ea971090-b1ea-4eba-91ff-62c344ff38f2", "comment": "Malware payload (RiseProStealer)", "value": "3b4e7104765744e1089f0bf6b6007e9c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867204, "uuid": "02921393-1f8f-4dd4-a14e-c8e65d78d430", "comment": "Malware payload (RiseProStealer)", "value": "fcd80c754b610021ea32a499102db0adaedc807cb9a77cf1424ac82084b63d8e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867204, "uuid": "bbe51165-796c-4668-a6d2-8a01280048c3", "comment": "Malware payload (RiseProStealer)", "value": "ca23c91db4af3edc3ffa8cd64a35691372fb5f99", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711867204, "uuid": "d7fae8ba-141d-4771-9050-61dfc2da20b8", "comment": "Malware payload (RiseProStealer)", "value": "50215f07497e88944dcec30a0e1c7aac5d2c70bbc267631e366c761284e253748c1226aeffb75d84441a93d1a8dced76", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867204, "uuid": "cbdec002-6925-4b75-b259-cf5e5c4b6991", "value": "T12C7533A1EA25FC53C9D64F3A16EC23275B7B511014D9C38737E4A40D7EE2681FA382B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867204, "uuid": "39c372cb-ced7-482c-a5dd-9328f0396618", "value": "56a78d55f3f7af51443e58e0ce2fb5f6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867204, "uuid": "7ca560c1-c60c-4900-b699-829606a08cd4", "value": "24576:jbknCTBN5WBO+vsgvkbXqpNo+abgfzc0ynUy1458JZOLtipMXIH4vaXz9SVFd:3t5WMKsg8kB9rc0Ty1FJZO6VCaXSFd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711867204, "uuid": "cf551680-ab86-41d8-9004-a3bd6e4e5200", "value": 1637183, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711867204, "uuid": "813ade04-35d4-49d9-a9a7-bc1792079e94", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711867204, "uuid": "828de228-ca23-44aa-9a98-9a6499faccf8", "value": "3b4e7104765744e1089f0bf6b6007e9c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78c3df23-eefe-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711848721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848721, "uuid": "706eb447-3a6b-43f8-bae6-1267f841ee15", "comment": "Malware payload", "value": "1dbb23faaaa1fe34ad73ab31aa919300", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848721, "uuid": "07e0e1f8-fa53-4a0e-bd11-031f21d16a2e", "comment": "Malware payload", "value": "fdbceaa0900e0d150831063905f12ad672b7e972139936802799769ca48b62b0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848721, "uuid": "5e8b55fc-e663-4d40-a5e4-084c69e78e91", "comment": "Malware payload", "value": "7a13c487fb0fd8adfd919676755e3ecbe40e36f8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711848721, "uuid": "ece67363-069e-4756-9140-80904d218c24", "comment": "Malware payload", "value": "ec50a3158d7893c1e9849af9b3115bf976c3e3a24a70ee595768e4ff6a4649cadee6a0efa1a2ccf0011960984052a825", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848721, "uuid": "a56374e3-48c2-4727-9d97-1836ae6546ea", "value": "T138159E46FBA401E5D07AC13885439127F6B2746213A05BDB63A5CA7A1B33BE27B3F750", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848721, "uuid": "c3f60847-b7f6-4723-a1cf-092bd3a053e8", "value": "c0d1b65a5bd76bd7d345159632914479", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848721, "uuid": "d9ec790c-0d0c-40f2-ba53-c580113989fc", "value": "12288:p1b3R37Los0HRAOuQV4jsjepXAqw1urbdxKZ1wvUf0mcOnfhqz9:pp3R37h0KOu0erpjGoxxPQD1JC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711848721, "uuid": "0b6ec1d3-add9-4fc5-b638-4cc94919025e", "value": 876544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711848721, "uuid": "3f7f8acd-7d34-45e9-bb77-2f6783169ddf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711848721, "uuid": "928de6a0-75ea-43f5-9e8e-019ad7d63f17", "value": "SecuriteInfo.com.Trojan.GenericKD.70894812.11853.20421", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71b1d721-ef2c-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868466, "uuid": "c81fcb07-2871-4503-98c1-2989a579985a", "comment": "Malware payload (Mirai)", "value": "623b9e16080897e1007b4835d33fc4ac", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868466, "uuid": "1b879fbc-bd21-4811-b55a-7e85764695ea", "comment": "Malware payload (Mirai)", "value": "fe1bc678953b4f0d18503998fd4c7fe1a47a5a33cd3c7af0706dccb387ecaf42", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868466, "uuid": "c3e2e595-be40-407b-b217-bd7093419739", "comment": "Malware payload (Mirai)", "value": "c2b6a6bbffdc7f8330ddbebeb16a0072d13caaeb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868466, "uuid": "e9cb9e2b-7c5b-4f85-8b1e-e6ec11ca7076", "comment": "Malware payload (Mirai)", "value": "d23e984e5eb8076b1cac018779c9eb292877aa0fe339b15f3607dbf98192fb1f93a866861de08c3cc2ff07f872becbf2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868466, "uuid": "42099409-594d-4061-bc36-e7b52eafc727", "value": "T1AE137C62DC362D18D618A2B8F4308B7D1B53D552E98B2FBD8966C3259403FACF9193B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868466, "uuid": "0bfbec48-88be-434f-bece-a35c15363edd", "value": "768:l6yWD/LPanxl6W1wphUZz54v4cgroD6JnCjy/MIfQ:lTWDLPanxP1mhCz2zZOdCjyDfQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868466, "uuid": "2e2b277b-18f6-4f44-822f-6b3c117972e5", "value": 42904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868466, "uuid": "14cdb258-75f9-4260-843e-cd273610da8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868466, "uuid": "02e9fff0-dda1-4fbe-be4c-f934bc36b30e", "value": "623b9e16080897e1007b4835d33fc4ac", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fd001a0-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711868006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868006, "uuid": "10b964a9-e3bf-4ca6-85e4-44e095b27fdd", "comment": "Malware payload (Mirai)", "value": "c55bfc400dfebb01e0edff5eed6bf58b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868006, "uuid": "d44ae35b-4e58-41de-b5ff-60ef8f77b23c", "comment": "Malware payload (Mirai)", "value": "fe812f043fa52233a0cb9527757aeccbd1d015a7e0d888dc503ee652d09a57d8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868006, "uuid": "4be2003c-97f7-490c-b270-31321bda9342", "comment": "Malware payload (Mirai)", "value": "40b8400c871c7cb90451bdce3052d344ea2b27f4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868006, "uuid": "25226629-9807-4599-a1fd-d843c94aabac", "comment": "Malware payload (Mirai)", "value": "65f40ccba6c45080a101082e5f386b048f14974e8144f5d74b268bf46ebdef0f7f8838395066ffb0f6fc606108f34764", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868006, "uuid": "59f7a064-475f-4dd6-bddf-9f8feba05c76", "value": "T10D04D81AAB550FBBCCAFDD3706E90B1139CC954B22A83B363674D528F54E50B49E3C68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868006, "uuid": "bbbd03ff-1f9d-4df6-a691-157ea3d8d8cb", "value": "3072:ueEksFM+wX5OdaVR8H3NaMZOTTMJxt9U+7fKbME:ueEnO+wXBVWdaMATwJHy+uw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868006, "uuid": "b3e72c42-1aab-42d1-9b12-3c02d73a128a", "value": 177860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868006, "uuid": "75649d58-520f-481d-af2a-525482a42987", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868006, "uuid": "d0c4a07e-1382-4e5b-adac-e7c995840bd9", "value": "c55bfc400dfebb01e0edff5eed6bf58b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "988bac2b-ef2b-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1711868101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868101, "uuid": "b44ddf47-d169-4e3d-a11f-fe201d5d309c", "comment": "Malware payload (Gafgyt)", "value": "5cb2bd8c1c17215f72deabb644ac4901", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868101, "uuid": "9db2b349-e012-48fc-9ca7-cce4111b0c05", "comment": "Malware payload (Gafgyt)", "value": "ffb69915b83ef557742a7bb57d00a2109842d14fe4be4fbd45461f2ac6250adc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868101, "uuid": "4d69f94f-1ca7-4f0c-b1f8-8bfe76332fc2", "comment": "Malware payload (Gafgyt)", "value": "cc20d4aab6553d42151d6e8a99788ab11a0d33cf", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711868101, "uuid": "d1e85f81-61c2-4c94-acf7-e99b3271c04d", "comment": "Malware payload (Gafgyt)", "value": "ba627c0affb26074d5bad306106d4e3c8881786d4773f00c9cf74870d89556d7c58acb85391aabd0caaa790507d30543", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868101, "uuid": "a3b85f70-9df8-47c9-a175-1d9a071d2c84", "value": "T182E32A24F8404767C3D323FAA64D879E7F3517E623CB33116A389DB45FC2B992929960", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868101, "uuid": "1fb5c6ec-ffab-442f-a2e2-bfd2f914d390", "value": "3072:6hlLp1zWvkO0PXs/DiW1VrdW5hn8eoadVjkmOMDQ4DtsL6Qse:O7J8/Di2RW5hn8eFkmOMDQ4DtsL6Qse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711868101, "uuid": "fa686a85-395a-42a7-b491-c0c84f9cfa93", "value": 149019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711868101, "uuid": "3cb02667-e9ad-4318-84f0-8a256afdfc27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711868101, "uuid": "fc3ff190-bb84-4d9d-b8a9-54c284ffb418", "value": "5cb2bd8c1c17215f72deabb644ac4901", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }