{ "Event": { "published": true, "date": "2025-06-08", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2025-06-08", "timestamp": 1749427381, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "2221fb15-aa46-401a-8cfc-46db130631f9", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "145b4c7c-4417-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749352636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352636, "uuid": "7ebe179a-7357-44ef-84f8-9c5caa8ad62f", "comment": "Malware payload", "value": "0eaf2a41f10b1b3f4cd2752ed374d68c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352636, "uuid": "33c4f0b4-035b-4677-b2e6-af7e74cc037b", "comment": "Malware payload", "value": "06eddd3eb54d819e825adb22b0f1b1636d57dbc19d6db4b280a412df777a1b38", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352636, "uuid": "3f747e76-e0d7-4a45-8b48-4400ee8974dc", "comment": "Malware payload", "value": "952633389e057bc3fbb6823d97bbafa441658edc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352636, "uuid": "34504b6c-d3d4-49b4-8238-f251db7b5ef2", "comment": "Malware payload", "value": "96d3b1a859ac9a3e0a3a53e4b72283f1968b65b715f77bc80e6f4767c289f1f2692e467602ebc69d33fe689c65843c8e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352636, "uuid": "3225829d-748e-4526-a181-491c1d987906", "value": "T10DD3E75E7E619F6CF398C23047F78E359298379627E2C685D25CD9001E2074EA81FBB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352636, "uuid": "3ed72c89-a358-434c-b566-08aea74c6099", "value": "1536:EJX3YY+iR7oFI9SboRCSaPOGfaTv3dVkrN2h+Q7XvsCP+a1y05q8TrV+j9lSlA3r:kSxOGyTDjvfPHrpFa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749352636, "uuid": "ab41f3f4-a6a3-44d3-bc6a-25cfe0015cc1", "value": 138384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749352636, "uuid": "ea6dbabd-ca6f-481b-a963-4d970bd451df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352636, "uuid": "297011b2-8713-4ba2-9730-e6a977a3b194", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02859bc7-4415-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749351747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351747, "uuid": "1d736fc9-5670-421d-b6f0-df3ed642f2ee", "comment": "Malware payload", "value": "57b9e96b7f4a7a24a7b5390e68bbd099", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351747, "uuid": "476bdad9-2456-48bc-a206-6aa91159e275", "comment": "Malware payload", "value": "0764c9bd903b2e5c1331c2984f50c2472c6a79cfdc25a4f2d8d017f8d0941d26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351747, "uuid": "351f6906-de88-4a99-a35b-39aa38fa7129", "comment": "Malware payload", "value": "240140e989d7f99fe09f2a1b9f756142cba6c4af", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351747, "uuid": "31910c3e-7670-4850-99a8-5b84599a709a", "comment": "Malware payload", "value": "56fe5dc7ff4bc62bcd5d75ca7a953d8b0f44467a094c2f37de4bda73f387cc717074fb26d7e5a4fc8468a341ca0e5587", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351747, "uuid": "4e129ff3-e0bd-4eee-9983-ee63db9cdfd2", "value": "T1EBB41228EE4E38C1F3D1E3B8DA0A4BB1B05B79D0D166C1B2BA41E25D95EDDDEC5D0212", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351747, "uuid": "ceb98498-df88-4adc-9de7-0e9d1bebd0e8", "value": "6144:O/izeB+/ow3gK2lc5bvyI0vOHD6BZkDgn358cIF3RI5HkdY1FP98/8ecjfP:3BohHKTyfvOHD6ByD4WcIMkuDmEesP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749351747, "uuid": "0ca9fe81-7f3e-4b48-8ab2-795a698fc9ec", "value": 509896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749351747, "uuid": "25ec891d-687e-4afd-b1c9-6d324961867d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351747, "uuid": "fba3e260-5c25-459a-8685-9561ccc8edb5", "value": "aarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40de4ee9-442b-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749361301, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361301, "uuid": "c15d52f0-2897-4083-aad2-86382b904a62", "comment": "Malware payload", "value": "d6b98af51f5b34e093a1bb586d9112de", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361301, "uuid": "a1e001bd-fd84-424f-8a09-ddae59f64c3b", "comment": "Malware payload", "value": "10b32f5211602442c9107633f0313be9aa2f78eadd63a57612f31559d25f8784", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361301, "uuid": "300d189d-d20d-40d7-8c01-a31aa9e5ceb9", "comment": "Malware payload", "value": "5138d480162f2a3368e595f23d529791c551c2cf", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361301, "uuid": "0a77d8c1-162f-4e03-be9c-a62638b53c47", "comment": "Malware payload", "value": "23e62a351ffcfa7ac05a47d1c197e3b0b04e6a18e228f030947b1dc608abd9aa3f73b58a4ba5efb6aaa9213bb13c1cc3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361301, "uuid": "8017352d-2070-49f8-86d9-204079286254", "value": "T16F341264677D0F5DD6A977BC1906A8DB03C31B835093E4EBAF64AF823533079E90B164", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361301, "uuid": "57142a20-32c4-4af7-9b10-e93becdd8fe8", "value": "e5c56bf3f5caa19cd9f71f802afd6890", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361301, "uuid": "eba003d1-8ee1-413d-9f60-ea8f549186c4", "value": "6144:7vjdgADwOwp03U4SoBTWk72LRoryd+aKL:Sq/wptF26kaLRLMZL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749361301, "uuid": "4533d058-2bc5-4f7b-ae87-0eeb5329aa44", "value": 232245, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749361301, "uuid": "17ee72ff-59d9-4c6f-b79c-f1e5c5d93d6e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361301, "uuid": "8936ceac-90aa-469b-bfe5-1b892059e3a0", "value": "SecuriteInfo.com.Win64.MalwareX-gen.15800.21919", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c349cdb8-4417-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749352929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352929, "uuid": "47838a3d-d04f-4271-b124-8867cbd9f339", "comment": "Malware payload", "value": "8ea04649ffeb21548db585451d798ccc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352929, "uuid": "2f46d516-18a1-4baa-a92e-1c17060b903a", "comment": "Malware payload", "value": "17fd4ebd54bf4507452a2162d456870f0731f2417f60d201eefc0ca196762ca4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352929, "uuid": "b41e15cd-b5a0-4f8b-ab6e-1f1f4007138a", "comment": "Malware payload", "value": "27d30938eb189732c2f1ea83e9e6feee1d1bf8ee", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352929, "uuid": "f9b47897-7a5a-4393-9632-25208595dcf2", "comment": "Malware payload", "value": "4c1e94a8f30225f6f268f5a103738ba147a9dcfd6d5fa740453ffce0de8c1cc06e6ad2b4af83683cecfde0a37a18eb7c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352929, "uuid": "7fee58a1-6b16-4492-8b09-56fe2ffec784", "value": "T196C4F1A377204F91C35195B209F389335AF6199706F39982537DEE107F20A68386BFE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352929, "uuid": "f7d7ab3c-7f69-4529-b32d-720b5662dfb3", "value": "12288:M57U0INmdtgOcyJXDOMzf03gdvZ/yCnEI7zv:W7v+mrY2xzf03yvZ/YIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749352929, "uuid": "f7d7b3f2-ac98-4a13-84fa-43696203c7b4", "value": 592688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749352929, "uuid": "c406a153-b846-46bd-bea6-8827ba9fd522", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352929, "uuid": "a3458da4-e448-4960-968c-3d8bf5eb5ac0", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9a73137-4419-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749353826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353826, "uuid": "de76c4b5-0250-454b-a488-29b149ff903d", "comment": "Malware payload", "value": "580886f053899c2d3548295da385595f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353826, "uuid": "8aaca3a4-911d-4e01-b140-75b70e12e958", "comment": "Malware payload", "value": "1c8e60695856720fe13881a75739c8992285985bff2aecebb5f2e4353b6d92a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353826, "uuid": "1b6dc198-b060-4d42-b0e4-b24fff94ab5f", "comment": "Malware payload", "value": "3a94ee9158b8b33911c0a8cc10fe2d2034780325", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353826, "uuid": "d216143f-3485-4cd0-a113-3c3d506338f9", "comment": "Malware payload", "value": "41a1ec208124a6aef31bde003ec1144a8df48c40c8dd804cb13ad5b82097b46394c799ee3e8945778a69808ea1131657", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353826, "uuid": "4c4b6065-18ae-4ca3-b3e5-9627f5744258", "value": "T11AB3184AFC809B01C5D526BAFA5E51CD33170BBCE3EA7112DC251F2067CA95B0F7AA46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353826, "uuid": "371ed67c-c0fc-4907-81d1-deb475c602e4", "value": "3072:af8UhfoCHH1tscLnf2WX3zgsDPcwW5Jkuql5DJaKlJ:afccLneWX3bDPcwUJkuql5daK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749353826, "uuid": "11c6adf0-2271-448d-8d95-55a4098ce2b6", "value": 117808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749353826, "uuid": "1322d7f0-fdd0-4f50-beb4-f0b8f7294b08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353826, "uuid": "7dea7d06-faeb-4c50-bdff-b07d9f182a8c", "value": "armv7l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b705d9e-43fc-11f0-8bd0-42010a9c0005", "comment": "Malware payload (Mirai)", "timestamp": 1749341186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341186, "uuid": "71fe4fc8-f2ed-4101-98c4-277d52d237e9", "comment": "Malware payload (Mirai)", "value": "ba79c98fd7ee46bd7935f8e287083afa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341186, "uuid": "44a63e14-d21f-4c2e-b6de-96b22396e4e3", "comment": "Malware payload (Mirai)", "value": "1cd65d2bd7ea65442c27439b6fac83408b300f6328d0cf609905afd7e1f5b64e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341186, "uuid": "2653ca33-2174-4283-8005-8590c2b7cec9", "comment": "Malware payload (Mirai)", "value": "3b77f1067a81b3e27b91544e1dab0be724f96d6f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341186, "uuid": "fa2c2fb6-09d0-4a27-a873-16a1e5342c14", "comment": "Malware payload (Mirai)", "value": "2c78a9bec3564868abff09534b3c8506ae3179cc2c967a72968fe009382f16673702c9d12154715fe1ce36d5c4588062", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341186, "uuid": "f04e2397-1b88-4b44-869d-b941ddaac66d", "value": "T1D993C71EAE219F7CF7A9823047F78F21A79823D237E1D585D1ACD6005E6028D681FFA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341186, "uuid": "4695097c-8145-41f5-a764-7a0a1cc42477", "value": "1536:HroPzh2l6xyj65ql5Z7SQPgo3feW/tnypJB2:HkPzJxyj6wZGQIo3LypT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749341186, "uuid": "3164ac08-54f1-4917-8973-402a082305e5", "value": 97364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749341186, "uuid": "9169c9f9-cfe3-4cf3-ac98-877d109327ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341186, "uuid": "6d61fec0-b645-4110-bf9d-a9ec36f8d450", "value": "SecuriteInfo.com.Linux.Siggen.9999.25720.3109", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c3a458a-441a-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749354126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354126, "uuid": "8823bfd7-5118-49ba-b049-276fab70cb93", "comment": "Malware payload", "value": "2363b499bbef543827f6a1e233ddcc76", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354126, "uuid": "3c6dbb86-a058-45a0-b33a-3a1d765fc380", "comment": "Malware payload", "value": "1fbae6df5a25581163bb20d3005c6dfb9e7602533313c69f6451ff12a8ad71dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354126, "uuid": "1a53b9ac-d6c2-4d8f-a700-2c2f354bd443", "comment": "Malware payload", "value": "6f9df27c39146bbdade902b6bf1164946ad9eac1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354126, "uuid": "479948e2-5355-41a7-b299-2a81cd3cecb4", "comment": "Malware payload", "value": "fb4134ffc1d540d7d6075db1736a1f8118e45222fcfc5285c8aef931d5c771bb3187515275b2aa31e9f2effeece9406e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749354126, "uuid": "916ce621-e87c-4ab1-93b6-e09672a50bb8", "value": "T12EA41212E290D8FEC4DAC070469FD27BFD767C544234BC6B6298F7322B3AE601B16A55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749354126, "uuid": "db32a182-176a-40b0-817b-cf1c10c5f8c6", "value": "12288:iD6LPBCvMk0O9na1M80cLt9i5aIaTtpc4W:2+QGO9naz0Szi5anTtR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749354126, "uuid": "e4671664-7f00-4e5d-a855-f2b2228d5b9d", "value": 482032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749354126, "uuid": "a45c4a9e-1934-4108-b418-dce08fd8138c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749354126, "uuid": "25c509cf-46e6-42e3-b64a-df91f2c64923", "value": "amd64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da8ad7c9-4419-11f0-8bd0-42010a9c0005", "comment": "Malware payload (Mirai)", "timestamp": 1749353827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353827, "uuid": "e4147e70-d8ce-4450-a070-4b63989a6454", "comment": "Malware payload (Mirai)", "value": "d9afbfc0ff08612271819c843d24b28e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353827, "uuid": "803617b5-f91c-486b-83e8-ea85e4262e31", "comment": "Malware payload (Mirai)", "value": "29b11c9442afb1719c02601a86b39e0c9159d22612336cd2df7e1e190c64c59c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353827, "uuid": "d08443c6-961d-4dde-bce0-bd444aa0c9f6", "comment": "Malware payload (Mirai)", "value": "8d6ed7dc0259b67feb0b8cdfeb5fd0f7811ae259", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353827, "uuid": "3388cb29-7a27-4181-a77f-ef2373796e9c", "comment": "Malware payload (Mirai)", "value": "48101430a18a62a8cfdb44479d982abb4b9285f7b78daa5f1d1ec60dcb61d8c8476f67db40c1193fe53102fef8e6af4c", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353827, "uuid": "1ecd7ac0-9dce-4c42-9830-acb1eb8fcd4f", "value": "T1FC11E9CF50A4DE7268404EDD31935A1A78C6C9D906CF8FC6E44E01A9A1CC94DB661E7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353827, "uuid": "384b9f1f-5014-4afb-b39c-9440e8b8b011", "value": "24:yRk5zFt+MB08xJxDkpxSxnkxnmkpxSx3xJkpxSxSx0kpx8jn:4k5REA0gzDkpxOomkpxOhJkpxOO0kpxY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749353827, "uuid": "8c269a10-dca7-4381-9205-d7ec626d9a60", "value": 999, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749353827, "uuid": "74302c45-c05c-486d-bdad-c980b65f99b2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353827, "uuid": "4c0937f1-ddbe-4481-a83f-9c3dd2648f18", "value": "l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "642f490d-4416-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749352340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352340, "uuid": "9201f17a-c1de-4b0d-bfbd-49b2f032c0b8", "comment": "Malware payload", "value": "09f40916974252e9379e41f71e43846d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352340, "uuid": "e1f799c2-351c-4c1b-8571-96217465f5fc", "comment": "Malware payload", "value": "2b0a3b152581831458470d9fb365f8d996b2051d24b5202dd9bfcb951ea356d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352340, "uuid": "6db019fc-4c8d-4467-9b69-d6ab9257f5ab", "comment": "Malware payload", "value": "1204bb87fe37375cd49f6ab760801eb24e184838", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352340, "uuid": "5ed5e94c-0f18-44e1-8f2b-fe65e38a083d", "comment": "Malware payload", "value": "1861e9cea75c2956976dad1fa10af092e94615c1f52928a43c587f46aeaeb4bef7b9209754045e435f385f7050776618", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352340, "uuid": "1e0a4784-0cca-469e-90da-893e1664df1e", "value": "T12DB402018F881F87C5AFCD750A2E167311AEDD9F46CAA43E807CDD48B6A6D0D6783C98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352340, "uuid": "10c6ed74-cb1e-49a8-9408-afde8a58cab2", "value": "12288:7A84JF9Qc8GgZxTM6m1U3snB6NnVuqnAtSyBpywBdlEykR6LkV6N0L8AXwtZJHZz:/M6m1U3rVuqAtSySwY1gEIZB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749352340, "uuid": "9e723890-6c54-480d-8e8d-349a51f90f3a", "value": 509272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749352340, "uuid": "9901620e-c88b-44a4-8746-af5af71d5564", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352340, "uuid": "a23b92b7-6ad9-410d-a9fc-99e4bf4fcfd2", "value": "mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61b2356c-4433-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749364792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364792, "uuid": "38f001ab-e8b7-4e7f-8b0b-974d1f85dbc1", "comment": "Malware payload", "value": "ef33b15e85088d3e60b626b865e46e03", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364792, "uuid": "f8fae933-b071-41df-9984-337c84fedaf9", "comment": "Malware payload", "value": "38410246d4a1382c4c918ad60c1e06255851ac7e167f2d60457734229376712c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364792, "uuid": "43441182-2e4d-4cc4-b5b8-66220df50371", "comment": "Malware payload", "value": "b3a509cc5564a4c712b0a131b65942735402f67f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364792, "uuid": "36c49f3f-24ce-437b-b6af-84ae3604b8e2", "comment": "Malware payload", "value": "5699b44b1ba06d7ffb028a1b4d930364c3f8480881fc7708a2e3c333a60ac9d1a02ab352c332a16582aff8a72d7c4dfa", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749364792, "uuid": "f8ee0699-d2a8-4957-91f3-3786bc95fe4b", "value": "T163341264677D0F5DD6A977BC1906A8DB03C31B835093E4EBAF64AF823533079E90B164", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749364792, "uuid": "68972233-87f4-49f0-ac0e-56dc52ad494d", "value": "e5c56bf3f5caa19cd9f71f802afd6890", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749364792, "uuid": "b5f6cc38-bf20-47f9-a8cc-5f5d82f2ba21", "value": "6144:7vjdgADwOwp03U4SoBTWk72LRoryd+aKJ:Sq/wptF26kaLRLMZJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749364792, "uuid": "e4eb6ce2-bef3-4a4e-bb71-59dad120a903", "value": 232494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749364792, "uuid": "b3355bf0-3621-4bda-b3f5-a515b19a69c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749364792, "uuid": "6d59b455-dffe-4767-a291-2fb7a2a40b11", "value": "SecuriteInfo.com.Win64.MalwareX-gen.18850.4223", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97edca79-4413-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749351139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351139, "uuid": "738d08ab-a102-4cb2-b8a6-5dd834aee51c", "comment": "Malware payload", "value": "5ee8151db8099ce476a7004977abb738", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351139, "uuid": "4301f93c-d3b4-4586-828b-f21ac0c41002", "comment": "Malware payload", "value": "3854cf52e82b0662191579cf99fee07c7e93f2fe498085b2e3ea80cdad173c56", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351139, "uuid": "5aad35f4-224d-4f7d-94b9-e01774b13464", "comment": "Malware payload", "value": "838195555a7fa7303e5f5b446c43a8e8d6fd4739", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351139, "uuid": "68b22b95-d2d0-4265-92c8-69d9234b5e42", "comment": "Malware payload", "value": "59aae475abebd9a450e3c965288bd2f823b7a453fef7e73dd74f034b4a04ff43bb9d60046731ccaa07ecf9caa961879b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351139, "uuid": "98260235-9674-4df5-8663-7084d210b72e", "value": "T13DB32B8AF8419B12C6E026BBFD1D51CD33131FB8E2DA7106DC156F2067DB95A0E7BA42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351139, "uuid": "791cb78b-141d-4de8-9a48-c4276061be7f", "value": "3072:Y8qFIhhvfkgOM1Ue83X1epH8XNcIEHat:Y1ykgOIUH1epH8djPt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749351139, "uuid": "d2bbd66e-83b6-48ab-b860-7ee72cbbe9f1", "value": 108652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749351139, "uuid": "305ee85a-92a3-4e40-b101-1f355d7b88e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351139, "uuid": "25d6e655-df64-444e-bf6a-ed8f3a6f0282", "value": "armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18491c85-4416-11f0-8bd0-42010a9c0005", "comment": "Malware payload (DCRat)", "timestamp": 1749352213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352213, "uuid": "9d976199-9d5d-49ac-abf6-49fdb2a58aac", "comment": "Malware payload (DCRat)", "value": "02fc026e01aebb9bbd766c8322b77b1b", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352213, "uuid": "4b36f7ad-54e2-4767-ae28-3027a84e51f6", "comment": "Malware payload (DCRat)", "value": "3dd9b873614264ccf0419eaa86f71bfdd796c0a8547cd2adfd2879ff9a8ec67e", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352213, "uuid": "006409d0-156c-4268-9e7d-e70d3bad9736", "comment": "Malware payload (DCRat)", "value": "fb32816a4589eeacbc89dae0ae25b825d8f62d44", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352213, "uuid": "e168a499-bb72-4762-8d32-74f70238dcc1", "comment": "Malware payload (DCRat)", "value": "ac80e556b35f2b6f52dd68d9f97582582489a5ef78d09856bbd3177130fb26bfda9d1c92930e0f748bdbcac3905ce156", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352213, "uuid": "9196b563-376f-4b92-9390-6a3e71bd8e78", "value": "T1A9F52341B6D114F1D037893289311A14AA7DFC501BA69FEF67D01B6AEF326D18E32B72", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352213, "uuid": "5163ef92-d4c0-4d9c-83d0-bc16cbf559eb", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352213, "uuid": "67dae909-4b3b-483c-80ea-14b617e260d7", "value": "49152:IBJg4oPyBbTVMYXw+GRrLxxYLakeuOewlQIhgPE0AAwxikgYGPUIuvsI8cmIkO3f:yqaBlMHvrlO2kTtGhT0AAoihtIhv9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749352213, "uuid": "dc400ac5-123f-455a-a774-1588871c1bd9", "value": 3593801, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749352213, "uuid": "3b9e5a13-703b-4ead-b93d-b82bae9b76ad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352213, "uuid": "05a80f3e-e905-4ded-8833-b54d34f1590e", "value": "02fc026e01aebb9bbd766c8322b77b1b.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "202536ea-4421-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749356951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749356951, "uuid": "6d15756d-d92b-4ada-bddd-ba7603685901", "comment": "Malware payload", "value": "ca265c5371935716010490ac920acf72", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749356951, "uuid": "a155ed9f-f777-48a3-ac60-5cb87f9902fb", "comment": "Malware payload", "value": "3f7ca6cdec846d51294263cefa4e51e63cc80395bebe904e2ace8bcb4ac0905e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749356951, "uuid": "9f3b1c99-a088-4c24-8046-71b414e41c0b", "comment": "Malware payload", "value": "cc9bc9414b3efc1cf8d3c2dfdfb4678a46510c05", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749356951, "uuid": "42064e28-ff35-4087-85ed-534e35e78940", "comment": "Malware payload", "value": "4d179c7f3cf78c3711129dfb37dc304d53cd9d96731a1ca283042655870030d999d269199cec7aaa1c8e49398b5321e2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749356951, "uuid": "3eae330a-e95f-4644-b68d-0b99f2b3d73e", "value": "T197548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749356951, "uuid": "1b305294-aa0b-465f-9b5e-6c3ed12a09e9", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749356951, "uuid": "126590db-76dc-4fe2-a9d1-ac03f9b90e80", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqti:CicLslsl6za+nSYWMh7mdsAB3ShBXT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749356951, "uuid": "912e6c22-46ce-4886-af18-16173ea985db", "value": 299225, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749356951, "uuid": "eb2825fd-498c-49f6-9fb7-53ce347e0e42", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749356951, "uuid": "faf8b050-f13c-4d1c-b3d9-987bd5a5d9dc", "value": "SecuriteInfo.com.Win64.MalwareX-gen.29640.2180", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ddc2f4e-442b-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749361296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361296, "uuid": "ce1372e0-3e4d-4011-a957-bb257e0543f7", "comment": "Malware payload", "value": "6e1c9941c0e2cb6dc71929a9407b7605", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361296, "uuid": "e75692c7-dcca-44c4-9837-da7aa3eaa29c", "comment": "Malware payload", "value": "4255b04224629ebdbc1a77372d85201ceba65b3930d0ca3939f92799ab9c8cf7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361296, "uuid": "2cc781cc-87a8-49aa-8390-c86de7d0a376", "comment": "Malware payload", "value": "6867508f2023f55d4aef8fe5ddc0f34330168e2d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361296, "uuid": "e4b7be4d-b99a-40d4-9e87-2ea2ef1c4e56", "comment": "Malware payload", "value": "dae1c3d9fcd3b391381c45978ce3de50385421da8eb413d71a75e755ee958ddc5da7e6e33248a3600ab26fffd2daa2b5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361296, "uuid": "af2c506b-213c-404e-afa5-fd22ce3ab31e", "value": "T1E3548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361296, "uuid": "3e86c0e6-69dd-4c1d-a7fd-1182e032bcdb", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361296, "uuid": "432145da-e7e5-4c4b-a3b0-57db8eadcb5c", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqtl:CicLslsl6za+nSYWMh7mdsAB3ShBXa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749361296, "uuid": "fefbad28-c102-42ae-9226-1878a3125019", "value": 299360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749361296, "uuid": "2c08fc6c-0ccd-4fb8-a8cd-9b58a5e18e08", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361296, "uuid": "4d1fcb31-4129-41bd-a841-8c6baa4bc88c", "value": "SecuriteInfo.com.Win64.MalwareX-gen.13601.32601", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bbc9b6a-4419-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749353534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353534, "uuid": "dc2954fc-dbea-4457-a076-6bd415da02d4", "comment": "Malware payload", "value": "0bfe0fc4f173dd3ecfd39b2ce824b7b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353534, "uuid": "04980adb-9860-47df-b979-7c7e04122f55", "comment": "Malware payload", "value": "4442ebdf49ee3abbcf577a58f8023b9fb8a3c7391e335cbf8271daf343d7eb58", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353534, "uuid": "34f010f5-588d-404c-af87-f981524bbdbe", "comment": "Malware payload", "value": "8fff7fe9466b9ac5b02273f5d18e19e1da7b842f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353534, "uuid": "992280ff-7f91-426f-b92a-f17e55e61f92", "comment": "Malware payload", "value": "7b31279d7600f46304bac664bd4a03998e1175ae42b628b77366b25369d0726bf0402e9aa922e79b5becb40c9073e7eb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353534, "uuid": "e2f6d06d-632d-4f46-9aaf-a0a222556ee5", "value": "T14AA40294E9819B62C2C401BFFF0F45BC77A31F65E1EA71068D16EB1662D745A4F7E400", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353534, "uuid": "7dcd399b-9fc8-44cb-85ed-3afd77927bed", "value": "12288:ndLGtVtlmIHk6Rtx02O6R+9X8C5SGEzf:pGntlzJx02O6E9X8XG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749353534, "uuid": "454a235c-4047-4db6-b17c-2d5730d08df4", "value": 480792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749353534, "uuid": "b2dc0682-5fab-4d2a-888a-29573aa61090", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353534, "uuid": "11e42cf1-0022-4004-b63c-3b3527e67910", "value": "arm926t", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2cb4d25-4421-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749357250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749357250, "uuid": "c4534e06-f1bb-4d5a-8929-6151fd95e2d8", "comment": "Malware payload", "value": "fe1b7e07fb1cf969b11da4013f46169c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "suspicious", "colour": "#3CDBCD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749357250, "uuid": "36630f95-92ad-44c8-8488-7bc08c8e988c", "comment": "Malware payload", "value": "451e18865c0940e95b4530dd11b157f63425f950e210e3d5d7ad0faf7a89832f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "suspicious", "colour": "#3CDBCD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749357250, "uuid": "80b815a1-90a4-4fa4-8081-b7fe26d930fc", "comment": "Malware payload", "value": "9b5abb7c6ca2b9c702628853baa4359965ec1914", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "suspicious", "colour": "#3CDBCD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749357250, "uuid": "32f9628f-a43b-4e44-815f-3cce338f4c39", "comment": "Malware payload", "value": "981b02b23d9e9a0ffa6ad7a72e8386f53080556fd70ee17c49f64781fc56e85230a796bdb37e9aabfcdb34d1e7cadf87", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "suspicious", "colour": "#3CDBCD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749357250, "uuid": "dd95286e-ff86-4153-b2a9-0879687eee5c", "value": "T107D74A42A2BA09C1FDF7DA34C9E65113D673BC166F3185CF22091B2A1F736E09976722", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749357250, "uuid": "7f72c408-c45e-44df-b703-96768935c47a", "value": "c743454fcb8abf560c3cf2348164c90c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749357250, "uuid": "9966ce23-987b-4224-91b8-8227b0046b8b", "value": "393216:R0jtDZ5f11Hov2ItdHO6rK4a3xhAGNTzmYPGrIsqG+suoRCxSRle+OBMyke17Yo2:RED5zyFuoRCxHBPdVY1ujyCc3siXRd/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749357250, "uuid": "3e8c98e6-76d8-42a6-bf93-f3905eee6eb5", "value": 59245936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749357250, "uuid": "e8df7134-e6c9-438d-91dd-4d28505b3121", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749357250, "uuid": "ad2c732e-7b47-4f55-93e1-5ddd2cb27866", "value": "Dependency.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "017d3566-440a-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749347021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347021, "uuid": "6de823ba-c2c2-4b4a-86ed-f123e5bd90a6", "comment": "Malware payload", "value": "b4320da6fcbc48396a075a8b7baa6300", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347021, "uuid": "02661291-19ac-42a0-a98b-da3274b9621a", "comment": "Malware payload", "value": "45617340756062fbf414a80cb178017d5c6fef354f1418a2ea130b53ac656f8b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347021, "uuid": "a20af952-ef95-4617-90ca-c27901b4c2cb", "comment": "Malware payload", "value": "0e42d068cbffcc3f98b1e71d0a32f5ca8b6250a6", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347021, "uuid": "91d6ec10-30e1-4e3e-9b4f-f6fb38197cd5", "comment": "Malware payload", "value": "5cc828b0e856dfcbd786f05ab3bfbb626a5749322f8d1df5820df2275214ab6f26adf6b0fa2fec3c1a7c7ecb5323bea8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347021, "uuid": "06274a4c-c2bf-4141-b1c1-745fd50f1ce3", "value": "T1B3548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347021, "uuid": "85e486b7-3938-4526-a872-1b5586099ffe", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347021, "uuid": "0ac0085a-9912-4b34-a10f-99c16a88ccbf", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqt8:CicLslsl6za+nSYWMh7mdsAB3ShBX/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749347021, "uuid": "c0bbeb0f-e654-46a6-a1d6-94cee3c92702", "value": 298680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749347021, "uuid": "617d8776-f051-4bc6-875e-5eaaff19f961", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347021, "uuid": "fa8a2fda-c7bd-45ea-a0d3-9fb65153f842", "value": "SecuriteInfo.com.Trojan.GenericKDZ.111786.8119.28841", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb94b4a-4421-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749356948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749356948, "uuid": "7a00e93e-2f64-41c2-97b8-0ecd9b2c1914", "comment": "Malware payload", "value": "d2e64ab70195471b3208c5193bebd5af", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749356948, "uuid": "e9f51109-67c4-4e46-8b74-741b81c5fbb8", "comment": "Malware payload", "value": "48dcbabf9edb87f5b6fe81d78ffe6100510c391ee2fb9d9dab5dcf234c2aa51b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749356948, "uuid": "6850d23b-a4c5-41bc-8906-fb325a1480b7", "comment": "Malware payload", "value": "2baf3a7144f2865be877829bf683e46142ea54ec", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749356948, "uuid": "bc9d188e-06e5-4b92-a42d-87a9345e796e", "comment": "Malware payload", "value": "07d94409f0f4d309f9187b7e3f51422162c6103638175a30281b55c20e437df8c093786ed1ff4ff0e9081df13e1b496a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749356948, "uuid": "e5de4dd9-d4eb-4224-8954-5773aeebcf7f", "value": "T188341264677D0F5DD6A977BC1906A8DB03C31B835093E4EBAF64AF823533079E90B164", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749356948, "uuid": "ea3da56f-1bec-4828-a882-4fcf22fee6e0", "value": "e5c56bf3f5caa19cd9f71f802afd6890", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749356948, "uuid": "c917dcdb-a8f6-41c0-90dd-54ad62433029", "value": "6144:7vjdgADwOwp03U4SoBTWk72LRoryd+aKV:Sq/wptF26kaLRLMZV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749356948, "uuid": "9c1d4401-8424-41c1-b5c9-0818318fbca2", "value": 232225, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749356948, "uuid": "f080d3d9-ed71-4d78-9fcd-fe552554422f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749356948, "uuid": "486a0818-9b04-4618-8a96-1d377dca6729", "value": "SecuriteInfo.com.Win64.MalwareX-gen.31455.6742", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5270ad65-43fc-11f0-8bd0-42010a9c0005", "comment": "Malware payload (Mirai)", "timestamp": 1749341144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341144, "uuid": "d48f1d96-dc7f-4ff0-a44a-0aa1e7bb0760", "comment": "Malware payload (Mirai)", "value": "79962226a3b35b82f78757903697c582", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341144, "uuid": "1704323c-2b3d-4066-a1aa-8d483bb5019f", "comment": "Malware payload (Mirai)", "value": "4ba6321f69bf7517dbc6c74d8d0e2a019b2e11e044d1aab65eeaaad947e76a4e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341144, "uuid": "a6840dc6-6c66-49d3-8a5c-4909fc55c4e5", "comment": "Malware payload (Mirai)", "value": "abfb4bed6293c193e31dd3accef7fc0fcd040270", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341144, "uuid": "162b0c69-9c57-44c7-aa41-d5c2d387b00b", "comment": "Malware payload (Mirai)", "value": "de3e2e4d7d96e8d94a97744662973e035e46c2a7530ca40fddc44b927f35ef6dbba7c1b4566a89a21440840e64b39bd3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341144, "uuid": "f69bb382-3c34-43a5-b3f5-54a27b027835", "value": "T14903E1DC03020AF7DD08E0B41EB507268F205AA2F102E95DB1A9EBDA9D0B4D1755BDEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341144, "uuid": "a595cbaf-f846-41c7-ad72-5f55a4e1afe1", "value": "768:hOiiyUM8EAGQ4nePQvVb8a1QWm4JT2lcbusnD5wNBJgGlzDpbuR1J0:UY8EAGXnePQto8Rm4g6ln2VVJue", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749341144, "uuid": "9da6b2ef-24d6-4467-9f66-f4a50ce62b8c", "value": 37880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749341144, "uuid": "b5ebe619-2905-4f7e-b77a-2d916316cd1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341144, "uuid": "1e83f033-dd99-48f0-bc03-f95a293d82f5", "value": "SecuriteInfo.com.Linux.Siggen.9999.25720.3109", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ab6dea0-4409-11f0-8bd0-42010a9c0005", "comment": "Malware payload (Mirai)", "timestamp": 1749346634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749346634, "uuid": "ef8546f2-3975-4321-93c3-5fc1adc20e7a", "comment": "Malware payload (Mirai)", "value": "d166c97686b1ab0a1a41e67eb9232367", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749346634, "uuid": "71b0b41c-20ef-437b-baa8-965c1dab722b", "comment": "Malware payload (Mirai)", "value": "51e83cce6c75d1baf3c7e7ab255c53d3f02f0fe71bb071ce68333c38e98e739e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749346634, "uuid": "762ca6b5-309d-4fc6-a138-2606be1ad1e4", "comment": "Malware payload (Mirai)", "value": "fbae061d06f067cb163b3d41677e62289a16a70e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749346634, "uuid": "422d3daa-9e0f-4a89-99e3-0951f695fe6c", "comment": "Malware payload (Mirai)", "value": "e929ce407a86b5e4a8226237773c1df6619fc42964f4246f3bf9d3237e59c72ba6a46dcf52174ee987b7d896a58c85d9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749346634, "uuid": "c03fadfe-8aab-4158-a208-53855ff5e29b", "value": "T126E32B46EA808B13C4D61776BADF42463323AB54D3DB730699287FB43F8679E0E63605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749346634, "uuid": "04f6e14c-5fbf-40e2-b18d-3024328c1dae", "value": "3072:qssaG7J/qS7SFnga0pkdHWD2/WXMKXxur4TCM/9emcJ0E:qsJG7J/qS4ga0pkdHWK/2Bur4eM/9aOE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749346634, "uuid": "59c3b279-3da5-4239-b9b0-2e4834bcd57a", "value": 146269, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749346634, "uuid": "01fad997-ba76-4392-a710-6994dad09ca7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749346634, "uuid": "72ef0dbc-2aec-4205-9ca4-ccd5e271c7ff", "value": "rtz", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae0fb236-4415-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749352035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352035, "uuid": "6280d0c0-82c5-4fe4-b6ae-a5e47a4e47f4", "comment": "Malware payload", "value": "11f6623f919a8905c5290f8b1ed4f505", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352035, "uuid": "37c9f88a-5def-4e0c-84ba-86a18aa0024f", "comment": "Malware payload", "value": "5898ed25814af29d0dc92511c7d7595797be37db7a0df759015a9ed5f0e7de14", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352035, "uuid": "635a905c-d5cf-4b4d-ac31-183499b6a4ad", "comment": "Malware payload", "value": "8b56b8291c38128b30718fae8e74287064818fc1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352035, "uuid": "5d6f68a2-11d8-4d45-b9fd-f263270923fd", "comment": "Malware payload", "value": "5c389e52c3c372ca4d18ecb4b1ef27ca6dc123ae6de8bafec78ef4b1845f31b23a23082001f139a3ccedb3181b587741", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352035, "uuid": "f7e1b0e1-944d-4b9b-ad5c-0338a80fe50b", "value": "T14EE4F1037308A756DF4BA83A82CBFD31B7C2799113D096627A80E29F8775726CF0D649", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352035, "uuid": "4109953b-34f8-4382-baa6-1b79adeaddc8", "value": "12288:0GCt9AoZDmbOxeQPTyDez9kQ8jGMKhmmMnRpOeHc:Y9tZQO92DnhDmc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749352035, "uuid": "9c01925a-5398-4b36-924d-1b8bddd6b127", "value": 657856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749352035, "uuid": "bba26d99-ee41-49cd-a603-8d0de1ae855f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352035, "uuid": "fcf564de-e7f3-424d-87d4-4cb97d501cd0", "value": "ppc64le", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99531f71-4413-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749351141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351141, "uuid": "3494e5d2-c087-4e34-986a-da702106ec8d", "comment": "Malware payload", "value": "622d6c1ba38833fb37ee68045a93a1e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351141, "uuid": "57d298f3-35aa-4093-b59e-04fa92ba3f5c", "comment": "Malware payload", "value": "632bcdd1c8ce7ff3a901237ab890915f5a9a384c49417552ba573c43a1f86615", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351141, "uuid": "004ea1ce-26c3-4d69-8656-0240dceefe81", "comment": "Malware payload", "value": "152587b81f79f7b6cc637231e535879e60e91d48", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351141, "uuid": "1fae5799-86ad-4354-8a67-c96603e9e1ab", "comment": "Malware payload", "value": "34181d2ebbbda6d92420a33258000ede21f28c88ed62fbb87edd62d668a66dff3574c679d6d77059bfbeff78c4239b17", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351141, "uuid": "fb77e5f6-0a74-4729-97aa-d2b12be19f08", "value": "T1F8A41212E290D8FEC4DAC070469FD27BFD767C544234BC6B6298F7322B3AE601B16A55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351141, "uuid": "e8cf7be2-beb8-4ca1-abbb-53839c150dcc", "value": "12288:iD6LPBCvMk0O9na1M80cLt9i5aIaTtpc4W:2+QGO9naz0Szi5anTtR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749351141, "uuid": "625d8015-e099-4d19-a723-973a68343e99", "value": 482032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749351141, "uuid": "c2f51ba2-2464-4add-874d-975c65f2fdf5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351141, "uuid": "e87fa49d-30d8-4f56-a57e-f086f9002ede", "value": "amd64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43d14f93-43fc-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749341119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341119, "uuid": "10c5c18f-af92-4e81-ae3d-772e42502ad6", "comment": "Malware payload", "value": "de2f69f2c76a8a3c182b1a972b9849af", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341119, "uuid": "441aa4b0-f804-4d2a-ad20-5d8fd10b8a43", "comment": "Malware payload", "value": "6a61e7f149a2c071e8c69f43f2ecb2e0eb6b5ba80b39841860256c9e8f13ccb5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341119, "uuid": "670b9303-06c5-4d10-b20d-e4cd910a653f", "comment": "Malware payload", "value": "7d9874dbe378aeedc5f8e985a223109daf31f86f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341119, "uuid": "8e971e1b-4365-4ca9-a578-541a9e722f6a", "comment": "Malware payload", "value": "43ac35d99783ab77bf589e1e243220cb670eb0f4d0c77ae712ef42ffe0f5eaa429618f358b9dca5e884cb9f294495e68", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341119, "uuid": "0db7a409-942b-40f8-9263-0ddef49c9b0b", "value": "T127548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341119, "uuid": "7027a801-23b2-46fa-bfe1-b74b20c0a4aa", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341119, "uuid": "fa6ee161-144e-4d9a-a5ef-611267577192", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqtU:CicLslsl6za+nSYWMh7mdsAB3ShBXX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749341119, "uuid": "671c66a7-90c5-4f38-92c6-d2dacbafbf1b", "value": 298524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749341119, "uuid": "4baa2a0c-7724-4772-b2ab-33d2ff57c3f1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341119, "uuid": "19e5a8db-1a50-42d3-91a1-e4625e49da7a", "value": "SecuriteInfo.com.Trojan.GenericKDZ.111786.28537.5557", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5196d8f-4418-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749353362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353362, "uuid": "8fe38ab2-1002-4c94-88c9-ee474df95d2f", "comment": "Malware payload", "value": "28d845fdcd8f20af37b212c9caf70736", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353362, "uuid": "da25fd85-065a-46a0-b9bf-a27f50d119dc", "comment": "Malware payload", "value": "6e1dd7d3517ba6eaa7c1df8fe7fa29ff620386365a8c977f5e16a89dd52260aa", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353362, "uuid": "4729e36c-917b-41cb-8f6f-da3feda732e9", "comment": "Malware payload", "value": "bd598d271ad25ca4d527fec984c68a0229bd90d6", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353362, "uuid": "3fbb9f5f-9cf9-4531-87e3-5e4505c723ff", "comment": "Malware payload", "value": "8a36d6938b183544750699e697327672e579f79e6a3afbfe8d6910369e8d6a29498e4987e64451afe345cba9683a7a57", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353362, "uuid": "ec5ee81a-fdc2-4e0b-ab45-e4c1c340b829", "value": "T1D0548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353362, "uuid": "935864e0-a7de-490b-9bf1-cb39ad0bff15", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353362, "uuid": "ed1321a4-5541-4290-9a2b-6c7007cc1333", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqto:CicLslsl6za+nSYWMh7mdsAB3ShBXN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749353362, "uuid": "699646a1-ea23-44e1-981f-11fec787fc08", "value": 298969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749353362, "uuid": "843351a6-0b38-4220-be48-d91de1eef23a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353362, "uuid": "d7b3ead2-fcde-40c7-a152-7a7f927ccba5", "value": "SecuriteInfo.com.Trojan.GenericKDZ.111786.31124.11118", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3586548-4402-11f0-8bd0-42010a9c0005", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1749343964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749343964, "uuid": "7c2b3b2a-03c7-4c3b-9722-a31fad06c10f", "comment": "Malware payload (Gh0stRAT)", "value": "3d05d3527ef01f77ca242bfc375e32aa", "object_relation": "md5", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749343964, "uuid": "7dbcc54f-4201-4c61-9a8b-ee8f3f22e54e", "comment": "Malware payload (Gh0stRAT)", "value": "6f4f89834fdd12b516d42f587a85f9f22ca4388ab52960c08cf9eed71b039d12", "object_relation": "sha256", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749343964, "uuid": "cddf0b10-cb0d-4df7-b2c3-254a61bcc243", "comment": "Malware payload (Gh0stRAT)", "value": "cecb44805570fdf980a5ede2b49a767dce860ee3", "object_relation": "sha1", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749343964, "uuid": "a2027f1a-3833-4c90-bde6-8f0fabe82af4", "comment": "Malware payload (Gh0stRAT)", "value": "b45b18959e8fa55acfa93e7cc1893f94a1f3f627b6d19c9f4b6205d2de03745a6fb57bd3bf0b4dce2f28452a3156fc6e", "object_relation": "sha3-384", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749343964, "uuid": "2ced79a4-016f-477b-85cb-0650df1f03a3", "value": "T1A3F523F7779B7AB4C58E0E70C49C2793289B77C34E920825D5E5290F2A30D9ACA593F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749343964, "uuid": "4644174b-e5f9-4a27-b43c-2d8aa1d450e9", "value": "211eafd76f4f1d028188dbce11ae54d4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749343964, "uuid": "2ebf0ec3-e03a-4260-99f5-3bcf31b3e15d", "value": "98304:CNLC67P0dbx0OfLrZLsPUcu+4FcZfFfCjP8:ChCWQeOfmPn4FcxFfK0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749343964, "uuid": "76b5a375-fcc6-4258-ac03-d7029839cea8", "value": 3376544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749343964, "uuid": "5f990ed6-65b3-4f05-baa2-4805fe0d9b44", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749343964, "uuid": "b1f92694-b677-4540-8708-b490b4ca77ee", "value": "69Zh.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040b5aba-4415-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749351750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351750, "uuid": "1a250048-4f2e-4c16-ad17-a254a5527d84", "comment": "Malware payload", "value": "4bf8c65ab9a9c46b56aba535eb73ca38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351750, "uuid": "31435900-57db-4042-b0ce-976bd6e3a046", "comment": "Malware payload", "value": "75b852d06b3a5ba8545c8789cd29cd7b41b6df94a058ab3709695e9d5a567d06", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351750, "uuid": "0295b957-4aed-4709-bb56-b2761b41d046", "comment": "Malware payload", "value": "9c7c0f9590446e4108966f0211d2481e93d49871", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351750, "uuid": "377efc5c-1b05-48a3-a06c-a8c05675d4d6", "comment": "Malware payload", "value": "50d96bd32ba83fe5af63d927d0a376e076d7ddd70c15a129b4f047928973635dc1f3920dec830f5bdc6b917c3f2f8d0c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351750, "uuid": "d1c7cfae-15b6-466c-aa60-b29f1d925cfb", "value": "T1E3E4F1037308A756DF4BA83A82CBFD31B7C2799113D096667A80E29F8775726CF0D649", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351750, "uuid": "d9247732-60e6-48a6-b184-cbf3a0293e5b", "value": "12288:0GCt9AoZDmbOxeQPTyDez9kQ8jGMKhmmMnRpOeHc:Y9tZQO92DnhDmc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749351750, "uuid": "f835235a-0118-41fc-8033-7a00e0215b2f", "value": 657856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749351750, "uuid": "97ba72e2-79fd-452b-9bb7-d4756a73a3d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351750, "uuid": "19a2d72a-e908-469e-a507-2bb0926f301c", "value": "ppc64le", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8da3b32-4431-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749364159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364159, "uuid": "07b2addb-1019-417f-98dc-f8bb63f8d1f9", "comment": "Malware payload", "value": "b03d8348f25d1b8c81a9a212560dabce", "object_relation": "md5", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364159, "uuid": "35730da8-cbd5-49f3-bf59-d4a71299d6d9", "comment": "Malware payload", "value": "7a39168f7ae2d593557df065fe0f02c3e614835625b436f0e86d76f6accb01db", "object_relation": "sha256", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364159, "uuid": "84f66748-1b3f-47dd-afd4-fe558230489d", "comment": "Malware payload", "value": "6b7541bb361faf790e24b8a42c52d993232dfaed", "object_relation": "sha1", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364159, "uuid": "5c0d64db-cd06-4bdf-81c2-e1f413fc051e", "comment": "Malware payload", "value": "3170cd0d9df59d12fea9fb40aa65cad97636c4f049215f386eedc653e402824d4266e777e469265014b685c12c29f218", "object_relation": "sha3-384", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749364159, "uuid": "427b12af-da14-40b2-9173-0fc702cbde4b", "value": "T1660833286FF67F020B435813F0B05AA1EE939E3516A16932FF5A05417745DE03AA29FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749364159, "uuid": "b79932e2-3ff8-4862-ac85-69eb9932b254", "value": "1572864:FwwY/F9WQr93MJTbet+qjHF1iLi6wwjEEKOdC2pr4qGYFdPV7KnHN+:Fwxdr9cZQ/l1i1wwjgOdC2pr43YyHN+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749364159, "uuid": "7abfde68-443e-4d6b-841e-5473eba671a7", "value": 80422870, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749364159, "uuid": "9a33366d-406d-426e-9584-ee500cca95b6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749364159, "uuid": "687daf57-57a9-4784-873e-e58b9adfb49d", "value": "American Giant promotional material.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2bddb55-4418-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749353358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353358, "uuid": "00b605ec-df6e-4535-83c3-eb3c711c9d02", "comment": "Malware payload", "value": "a0f9e7cecab45dfa9029ab5f6b7e1cd4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353358, "uuid": "15716819-5d4f-460c-8bd2-fa7eecbaa350", "comment": "Malware payload", "value": "7e912f2345a71245607bc554702a2c8f994c45611bfcfee2411cb9fdeb915fc4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353358, "uuid": "65b51bf6-f21f-4539-a64f-9f92a2bfdfe1", "comment": "Malware payload", "value": "54646e727d306392b58c43f6cd2aebd0439f6ae1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353358, "uuid": "8a01ef83-3aae-4f51-ad44-772fcdfff38e", "comment": "Malware payload", "value": "3e9c99f0a30836aef8df5aeb38ee552ddfd8a7b066903bfd52ceb9dfe3c9013c61b1dd447525070fe32164e37a1830d4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353358, "uuid": "bd1fdbb3-bc5b-4c93-8503-98591e441573", "value": "T101548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353358, "uuid": "4e62f160-2ff6-4a9c-b184-5ad1dd595a9d", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353358, "uuid": "cf07ad15-9804-4f91-a2e0-9a664893bdb6", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqtm:CicLslsl6za+nSYWMh7mdsAB3ShBX9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749353358, "uuid": "0a576d27-b452-4768-b134-6d38154feb16", "value": 299088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749353358, "uuid": "1df5b7cb-49e1-4ec9-acaf-0f5b3f19a375", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353358, "uuid": "6e58e190-0061-44be-8aa8-e521ef014934", "value": "SecuriteInfo.com.Win64.MalwareX-gen.12970.30647", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87cbac07-43fc-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749341233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341233, "uuid": "8255be06-5139-485e-876d-f19a8f99eed8", "comment": "Malware payload", "value": "797077f832729660524e582ebd653569", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341233, "uuid": "fc449537-a6a7-4c0a-9955-180687d42a2a", "comment": "Malware payload", "value": "7efa2e34399fcbd78a2e10204e37787b56da3c6859605b9fb7f0f2780f42cae7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341233, "uuid": "f4648ecc-0a58-4ad9-88e8-e8ff400cc8bb", "comment": "Malware payload", "value": "cb7d506433cf2321d613f3a44361e44d020d6ea6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341233, "uuid": "5d3239d4-78b3-4f83-9fd2-5fe53efb1481", "comment": "Malware payload", "value": "2fbd9a545397842ae8e59cc9881244ddb5642cfc9c7b8b8b2a30bc166dfb4682dc2cd8bca019c5fe307f2d833d4a78e0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341233, "uuid": "e4b1ffa3-1e61-4fe6-8f43-fc1a5d0231dc", "value": "T144C42241EAB7C0F2F65349320103E7BF8F33C90A9165D2A6D742F661EDB1B42469E66C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341233, "uuid": "48febc55-1fa4-4b47-bb19-ff45902c78ca", "value": "12288:5D+Azf/CVCW3ISw+hRNb3W/aTyA9VV/cZWLnR98V+:5D+AznCVNIZ+vNbG/WYWrR98V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749341233, "uuid": "230b9587-38aa-41d5-a463-4423dc025941", "value": 587764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749341233, "uuid": "dcb10530-819c-4b43-bfbe-661d1d464408", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341233, "uuid": "3ed1e5ff-ab6a-4014-99a9-a5e5cc72d714", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "914490ee-4410-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749349839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749349839, "uuid": "15b24a79-4325-45d7-bc0c-2fb619a5340f", "comment": "Malware payload", "value": "2496ec9b5b54f7a8b84f852a09cd403d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749349839, "uuid": "e020d97a-98dc-448c-b677-f9318ba39155", "comment": "Malware payload", "value": "7f5bcd5a9c7802f752ccdaee550652a090618e6872f954bfa1caf541c1400495", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749349839, "uuid": "eab18093-2c0e-4f78-90d0-30f68d483d25", "comment": "Malware payload", "value": "9a7d965b42c167264b4515084a4507e50dabb13b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749349839, "uuid": "55191985-4da7-49bf-8082-1775ff9c0a0d", "comment": "Malware payload", "value": "3028de657d3de42c1160d8692ebff3d7a8e5aedccfda8ace7cb9598630e2d1307aab58c0ee55b4d34284d7ec84f3f28b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749349839, "uuid": "33c2acff-169a-4055-86d9-571905de2e84", "value": "T11E548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749349839, "uuid": "559f2635-934a-4cb0-8864-7e7d1005dffa", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749349839, "uuid": "da2d9980-0df6-4374-ac21-fc44a5abc884", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqtw:CicLslsl6za+nSYWMh7mdsAB3ShBXL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749349839, "uuid": "ffddbaa0-7f31-4b83-b628-f37429275e0a", "value": 298948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749349839, "uuid": "557e4881-94ca-4ff5-bb23-d11bc0b6c0b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749349839, "uuid": "1e361c6d-37d9-479d-8f1f-2fb17ad3ed4a", "value": "SecuriteInfo.com.Trojan.GenericKDZ.111786.1601.23624", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20b3bdce-4427-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749359529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749359529, "uuid": "b5687902-42a2-4810-a5f8-6267b3edc97c", "comment": "Malware payload", "value": "342074cfdb9e5ebf298668d41ce777b3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749359529, "uuid": "e3957989-afe3-444c-96f1-a773402484b5", "comment": "Malware payload", "value": "8b508a9b1cd223d9d8c0e0ef3b562c9f9ba44e9df2f02f70b88445a649853120", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749359529, "uuid": "f11d5113-c3de-4479-bb4c-7f9307254d7d", "comment": "Malware payload", "value": "e355dbf07928b0123f0375eaca51eaa2cabca5be", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749359529, "uuid": "a92e7fcf-d7de-41fb-9058-9c9f956e92a3", "comment": "Malware payload", "value": "fbfd5a1b473ed21c64cdca0261883d2f2f3c92ad10772827a232e56e8f99a6bf9cb1deb6ba1eda1834dd181143906a2e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749359529, "uuid": "b1ebf859-1f4f-43eb-afbb-775eb32bb574", "value": "T127B41228EE4E3881F3D1E3B8DA0A4BB1B05B7DD0D166C1B2BA41E25D95EDDDEC5D0212", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749359529, "uuid": "c88b0114-4bd8-4a66-8443-fded1b4902a3", "value": "6144:O/izeB+/ow3gK2lc5bvyI0vOHD6BZkDgn358cIF3RI5HkdY1FP98/8ecjfPS:3BohHKTyfvOHD6ByD4WcIMkuDmEesPS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749359529, "uuid": "557e26ed-2f46-4e33-ab92-01f2fb894fd8", "value": 509896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749359529, "uuid": "445c0de5-2bd0-4c5b-814b-3c1992b0cea1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749359529, "uuid": "562a08b2-e010-4b85-a81a-982e1f03089c", "value": "aarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b71bae0-4414-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749351440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351440, "uuid": "c1d01427-515e-46f7-8c99-cb9ae72c73ac", "comment": "Malware payload", "value": "f80a07c43b701e55eacc61025b72c2a8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351440, "uuid": "419df8ad-1514-4a9e-b285-69895205a92a", "comment": "Malware payload", "value": "8fc96a052a71b9d529240985628f7570de370318934ebb33a76aaaec37e382c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351440, "uuid": "b5a9c4a4-ef42-4c04-b859-0ff770690586", "comment": "Malware payload", "value": "f15566d0970a06de40b7edba485392e00d6f2ba8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351440, "uuid": "f7b74159-bc86-472e-89e7-772d25379c66", "comment": "Malware payload", "value": "fdf1ce6512fdcb7d940242eee74de23ff39b51c3b2e1bb2b112a54c4f17db520564c6e291ff80130d01221f7600b5cba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351440, "uuid": "a0623f03-2942-4bfd-8ec7-a203fe743614", "value": "T100B401CE9520D295C4B02D33C57BB2F282AB6D3609596E1CDDD8FF6B2CB67450638B12", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351440, "uuid": "776e18bf-6c8e-4073-aaef-49579170e351", "value": "12288:NbX5mTA3bZNKiG01B7crv+SF7GW5a65jx:tX5m83bZNKi3B7AZXa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749351440, "uuid": "e71883ee-855e-445f-b993-452174d7cd06", "value": 502120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749351440, "uuid": "4128d335-6902-4ec0-9687-e3342c67c9dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351440, "uuid": "6ceb556d-6a81-4654-98dc-4e552c1c4c2e", "value": "s390x", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1cf1252-4417-11f0-8bd0-42010a9c0005", "comment": "Malware payload (Mirai)", "timestamp": 1749352927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352927, "uuid": "7e3d9fb3-0ef5-4206-b000-df8d9d3f20e1", "comment": "Malware payload (Mirai)", "value": "415925a827eb38bcd1d08468860801dd", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352927, "uuid": "f156eb3b-a470-40e4-b611-b63ba9cf7980", "comment": "Malware payload (Mirai)", "value": "9f99d87475016fce033c9ad5a8f914f8f87d94f3afb9ba98c5a83977321e1710", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352927, "uuid": "0d5d3af9-31c7-43c9-b2ab-19fbdfc37007", "comment": "Malware payload (Mirai)", "value": "f1bb05583cb0ce47c5a0cf2318bed47e9c4fa0fd", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352927, "uuid": "15dc208e-3e9a-4a4c-9501-7a94bffa2a7b", "comment": "Malware payload (Mirai)", "value": "abc776652c33075a0ef2595b7636cf5703820f2366af7a937d9a7bf90fafcdbda3d11817b70cf7124db732e585aa18db", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352927, "uuid": "52f53358-38e9-492d-97ba-9ce083e6a0f1", "value": "T1FF11B9CF41A4CD726C408EDD31934A19A4C6C9D957CF8FC6E48E05B9A1CD90DB251EB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352927, "uuid": "c85a0cdd-5af8-4e56-9cd6-b8dfee71a6dd", "value": "24:k9q5zLt+MB08xJxDkhSxnkxnmkhSx3xJkhSxSx0kh8jn:ko5XEA0gzDkhOomkhOhJkhOO0kh8j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749352927, "uuid": "d37cdf80-e874-47a9-9871-5cc77ef92e1f", "value": 1002, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749352927, "uuid": "3b39ef41-ce13-48c5-aac3-b48a829ce3ef", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352927, "uuid": "8c21682f-74d3-4b6d-bff8-f94998f65fd3", "value": "r", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f9ec4d8-4433-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749364788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364788, "uuid": "a3ac5343-c4ad-434f-b1ac-6f5df3b6c1fe", "comment": "Malware payload", "value": "bcd5109543851f35109f03cd1ff7abf1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364788, "uuid": "351451a7-6e4e-4c60-a842-c2d079242554", "comment": "Malware payload", "value": "adb50eeeb46201719c78f40cadeb612f0b74a1f0b75736bd897d617af133a315", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364788, "uuid": "e21018b9-d8d9-4982-a52e-063938ef7a59", "comment": "Malware payload", "value": "3b5399d12fd468a9be4c6a76f7a4a4eeb3d36725", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749364788, "uuid": "6d202b0a-a1ca-479a-b55c-5ea6e482218b", "comment": "Malware payload", "value": "968183ef9e2e3beef5ba5743b2a1638b3c59e8b3b5595d59c91248ac68abe9d22771c14088966bb75a154521f5e024dc", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749364788, "uuid": "d2bb0d5b-5d18-4e54-96f5-2484a652b9b5", "value": "T1F3548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749364788, "uuid": "a8a827b6-93b3-420a-b708-eb663362e007", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749364788, "uuid": "da11b9e7-1ff2-4616-a281-4727e31859a7", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqtC:CicLslsl6za+nSYWMh7mdsAB3ShBXv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749364788, "uuid": "48c90c37-c2a0-4951-9e6c-7ba12983864e", "value": 299495, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749364788, "uuid": "1633be86-66d0-4edd-aa29-9ef96d8a134b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749364788, "uuid": "63c96273-9706-4d83-af6a-693104496c23", "value": "SecuriteInfo.com.Win64.MalwareX-gen.21968.32374", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8b398ca-441c-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749355032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749355032, "uuid": "b4d93be6-f93c-4d20-a7a8-1ed8b0e1abe3", "comment": "Malware payload", "value": "784886f628e098144532e7ec9ce49f27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749355032, "uuid": "6de6db02-db36-419a-9843-7e8d528ab35b", "comment": "Malware payload", "value": "b59a71e42feae06a2b52c5d9509871f3528faf5f57423b9c7553438d9ec6b2d4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749355032, "uuid": "fa164829-5697-4b11-b671-35736a917820", "comment": "Malware payload", "value": "1e7e7d1d2aa9cf3f78c02fd50d57a8d68b4002ef", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749355032, "uuid": "69a7b285-5982-4980-807a-25f200d3e36a", "comment": "Malware payload", "value": "c4181146114c6bc2d62330adcf8d9c0d5f28e7f6a912e1da6c96662bf03820cf752f0cd7e8f1627335f755e2ba9169f3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749355032, "uuid": "cfdab033-7084-45d9-bde3-5f2b8c11d300", "value": "T17BC42241EAB7C0F2F65349320103E7BF8F33C9099165D2A6D742F661EDB1B424A9E66C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749355032, "uuid": "406ebe96-5ff8-46de-a3cd-e736b90c6434", "value": "12288:5D+Azf/CVCW3ISw+hRNb3W/aTyA9VV/cZWLnR98V+:5D+AznCVNIZ+vNbG/WYWrR98V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749355032, "uuid": "7d33fa24-3355-48b7-9aed-3fe8d260caae", "value": 587764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749355032, "uuid": "1ed34c3e-8f5b-4d42-a14a-c7e5ba720dc5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749355032, "uuid": "f29f0d91-7024-4c07-9aab-d785b823d16d", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9359472-4412-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749350846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749350846, "uuid": "63b2b17e-8cf8-4ef1-b76b-81fe51d42ce0", "comment": "Malware payload", "value": "5e8173eb9037bfbf5e91a995e0ae49e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749350846, "uuid": "a6fdb111-d089-4b23-bd30-c87629f5a7aa", "comment": "Malware payload", "value": "b75ac972f870efd6574747dd3811697c71f7fb0d4756bf53b2d2cd3147eb9bb9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749350846, "uuid": "a100f6a7-d374-4baa-86df-00cb899678d1", "comment": "Malware payload", "value": "a005fa0ae07f5e39bc851c6392c2ccd9cf853aa9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749350846, "uuid": "49d6daba-697d-4ca9-9b4b-76dbed1f0868", "comment": "Malware payload", "value": "798c19604712d18b9c25107db066c64e6990a2a51f2d6e19e2f29fc3c0f20f93151abe717ee23cb600c851a3faf4f99a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749350846, "uuid": "72c484ed-398e-4a4f-a601-ee02f7e27aac", "value": "T116B41228EE4E38C1F3D1E378DA0A4BB1B05B7DD0C166C1B2BA41E25D95E9EDEC5D0212", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749350846, "uuid": "3e8399d6-79c1-4e04-a3cb-40c35e756363", "value": "6144:O/izeB+/ow3gK2lc5bvyI0vOHD6BZkDgn358cIF3RI5HkdY1FP98/8ecjfP:3BohHKTyfvOHD6ByD4WcIMkuDmEesP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749350846, "uuid": "1bd1ccbe-4baa-4c4a-b38f-334a692ccc27", "value": 509896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749350846, "uuid": "d5bd36ba-42ae-415c-ba9a-17f426470992", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749350846, "uuid": "f5222c73-8178-4761-ae1d-8c310436bb1f", "value": "aarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "725aa2ca-4418-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749353223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353223, "uuid": "75a3d74f-6231-457e-b2ce-27ab06888b28", "comment": "Malware payload", "value": "da75495381c96b4f4767252eb3625726", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353223, "uuid": "93c22236-0cd0-4ed9-a126-6a14f97b6f2f", "comment": "Malware payload", "value": "bafed8d91af1cfed06dc7f376ce601c6509e18b46247dc853608839221d69993", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353223, "uuid": "37c69366-b5ba-4930-9bb7-ff2654ad3760", "comment": "Malware payload", "value": "2fa44d1788d89c694ca5be5a0f303e9754019785", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353223, "uuid": "83a3cf23-979c-4d22-8f05-0cd86b5fc923", "comment": "Malware payload", "value": "ae5840159302549f492e044b410ed3a9d5921c093dfe935cd1a9988ac23e50670415e4c618014deef8995a2df1bd6178", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353223, "uuid": "8df76c8e-7a09-425b-9228-a74056f3fac7", "value": "T147E402017F152032C9D21AF0A8B747B4EB914CD650B4D6777749EB222BF36362C8BB99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353223, "uuid": "8f59edc2-6519-4953-9f62-b56e002c64f1", "value": "12288:XeBWVNQiXY8aap1qXG2YmzwcyxDKsFM+t9j+9+X:uQQAYLapnLmzwhtLy+t9j+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749353223, "uuid": "3e0a385d-6c2f-4487-8279-4c64d8fbd7e6", "value": 657856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749353223, "uuid": "abbc7e07-5d7e-42b5-b114-31a3e0cc8836", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353223, "uuid": "c603d88f-9a39-4720-89cc-1179c44a69b7", "value": "ppc64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e41d5f6-4413-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749351149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351149, "uuid": "7629d263-7ab6-4452-9433-fe417b503e32", "comment": "Malware payload", "value": "4b3f5424797d1e6f6d4536fc193b1d40", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351149, "uuid": "a050acb1-7564-48ff-b741-9505254a67ca", "comment": "Malware payload", "value": "bb04c91389c378d79e611c49260b3bb88406356b44978d71da8d242d0cefd4a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351149, "uuid": "fd891e0f-bf64-45b7-8c49-aafdbba0f920", "comment": "Malware payload", "value": "f112873ee6a94fe4848f88eed46c422772e7fd6e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351149, "uuid": "5b49d7ca-e758-4f7b-84cb-26f58507674b", "comment": "Malware payload", "value": "2de9792acd5b55e12655f92f558ef302f883f0b29bde9e8da7b2b6079f2f1a4dce7681ec7b73da4d254b51ad32413462", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351149, "uuid": "d8a87d1e-9049-4a75-899d-de4585883a72", "value": "T181C42241EAB7C0F2F65349320103E7BF8F33C9099165D2A6D742F661EDB1B424A9E66C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351149, "uuid": "8b63fa9f-dd38-4122-88e7-4f95c781a8e6", "value": "12288:5D+Azf/CVCW3ISw+hRNb3W/aTyA9VV/cZWLnR98V+:5D+AznCVNIZ+vNbG/WYWrR98V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749351149, "uuid": "0f1be456-1a2e-42ef-9ff4-68fafad3b454", "value": 587764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749351149, "uuid": "16e6b098-d626-4093-9dfd-8feb90ba9f91", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351149, "uuid": "6df09667-6cfc-4281-9c39-b79c85ec67b6", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "132abbad-4417-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749352634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352634, "uuid": "60594fec-381d-4a5c-b92d-cab14709b1af", "comment": "Malware payload", "value": "24fbbc3fe1626b9920653e66fdd6442d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352634, "uuid": "05cfec84-c213-44ec-9a93-e3e5990381ff", "comment": "Malware payload", "value": "bcf028a4f0352ae20950316ca3aee46485041047ff2cb918c5f6c3f3effacc0c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352634, "uuid": "8990cacf-896a-430e-be87-e3cc85eedb6a", "comment": "Malware payload", "value": "80bb9ec32bff213e7f2ae111cc91811d1e0a055f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352634, "uuid": "e0edc609-e945-4312-9e0b-19db899d7447", "comment": "Malware payload", "value": "06d141e62693f22abd2401d50f5e6243a0339dc3a39a5b98aeba2b6d07a67f80b7abe019a41610ba0cab160828818f2e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352634, "uuid": "4307fa4b-b45a-4fab-b186-4392c0992acb", "value": "T193B402018F881F87C5AFCD750A2E167311AEDD9F46CAA53E807CDD48B6A6D0D6783C98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352634, "uuid": "deb1f0dd-122a-4e46-a1ee-b50ffcd9dc95", "value": "12288:7A84JF9Qc8GgZxTM6m1U3snB6NnVuqnAtSyBpywBdlEykR6LkV6N0L8AXwtZJHZz:/M6m1U3rVuqAtSySwY1gEIZB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749352634, "uuid": "40e8b6c4-a80d-44c1-b103-4f241c7729c3", "value": 509272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749352634, "uuid": "362f4ad7-8755-46bb-8821-3b5c45fc4679", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352634, "uuid": "24c12136-5240-4e69-a5b7-94b4156d82e2", "value": "mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fda2d96-4401-11f0-8bd0-42010a9c0005", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1749343367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749343367, "uuid": "79a2cc01-7e97-4beb-84ea-07cb09e4ab0a", "comment": "Malware payload (Gh0stRAT)", "value": "15b6a86a710149339020086f8bc82ca3", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FakeApp", "colour": "#D5FE4F", "exportable": true, "hide_tag": false }, { "name": "gh0st", "colour": "#2119D8", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749343367, "uuid": "79975590-5809-4237-96e2-eff7384499c3", "comment": "Malware payload (Gh0stRAT)", "value": "ca9b55e5dd0643075bf167d6cb3e6011aebe7b2cdcbcc335c4794aee97477901", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FakeApp", "colour": "#D5FE4F", "exportable": true, "hide_tag": false }, { "name": "gh0st", "colour": "#2119D8", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749343367, "uuid": "dd553ced-acb7-4124-93d6-38edac7d98a0", "comment": "Malware payload (Gh0stRAT)", "value": "4a4184fe720497e4f5757657a6bc59d5855c3a3b", "object_relation": "sha1", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FakeApp", "colour": "#D5FE4F", "exportable": true, "hide_tag": false }, { "name": "gh0st", "colour": "#2119D8", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749343367, "uuid": "a22518a0-9827-43ae-af4f-35e0d062f896", "comment": "Malware payload (Gh0stRAT)", "value": "06dca85f71f20f261461bf1cf855dbf675079f5c4f894aba56b4e94c94d2e92e0bf8c947b42c6754302ddafe0c912fc6", "object_relation": "sha3-384", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FakeApp", "colour": "#D5FE4F", "exportable": true, "hide_tag": false }, { "name": "gh0st", "colour": "#2119D8", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749343367, "uuid": "f5d4a7d9-cb8d-4ea8-b2c8-605fa2c1f045", "value": "T1950833EAA0E4551FD45E4B3282B35128107BDEF991220C5E43E07E5DEF3F9106EBA71A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749343367, "uuid": "4983e51c-19d0-49c8-8694-7d01f587e5b6", "value": "5a594319a0d69dbc452e748bcf05892e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749343367, "uuid": "51aca22b-c25d-40c4-b6de-a2d8743702a3", "value": "1572864:5h6SwJDy2zYhLynTJG1Lsx1tTCYAWEyDBFHTMids0srGixA409q/rE7ip7wc8A:bdSW2AcJGNsx14NWEydFHTMii1rGixAY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749343367, "uuid": "848dff61-ddc6-4599-a10b-ef753e715ec2", "value": 82602124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749343367, "uuid": "3462655d-0a70-4823-875a-1dccc2ffe526", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749343367, "uuid": "71e0487c-2018-4010-b810-003f76af8b17", "value": "\u5411\u65e5\u8475erge (2).exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f3668f4-441a-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749354131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354131, "uuid": "42a02237-da77-4438-af5e-5fc31f2b7a48", "comment": "Malware payload", "value": "e8c0d1917a8d57b4169f136f7534269b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354131, "uuid": "c62dea1b-1437-4aff-99cb-d8d97742b1e8", "comment": "Malware payload", "value": "caa927dce099324ae5376cc1ecbb5afae49c1f5aedb98b18cb6c375636a8b85b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354131, "uuid": "ad4707f1-8808-4e01-a573-3e30c00d1de4", "comment": "Malware payload", "value": "c8267fad5b52b853c299c5a4cf5e1491f8baba67", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354131, "uuid": "d6b894d7-c417-43a6-a1a9-ae1f6cd778c2", "comment": "Malware payload", "value": "6b0dd7d0cba11c5ab74a536b3751e38b7d3e66744064f799befd0b89167e0e81607ef13bf9e0fa41ac899a7f1fcbca3d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749354131, "uuid": "90f7f758-ea1e-439a-b4bf-dddff143f59a", "value": "T123B401CE9520D295C4B02D33C57BA2F282AB6D3609596E1CDDD8FF6B2CF67450638B12", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749354131, "uuid": "4587ee90-8446-41d5-a095-2e855a7922de", "value": "12288:NbX5mTA3bZNKiG01B7crv+SF7GW5a65jx:tX5m83bZNKi3B7AZXa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749354131, "uuid": "2224a920-cd6a-465e-95c4-7142e513c164", "value": 502120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749354131, "uuid": "2ed5825a-485b-4b35-acb5-6cb01fa5fd27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749354131, "uuid": "345821b7-f6eb-4b1f-9159-5fc4587e8f89", "value": "s390x", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dc16d51-441a-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749354128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354128, "uuid": "72849fee-f39e-4707-9f28-e0592a043d54", "comment": "Malware payload", "value": "79d5cd44b83d8703cecfba7cd4bef9ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354128, "uuid": "2771a7e0-bf30-4cb6-a016-aa2dd7621140", "comment": "Malware payload", "value": "d1e45d359162df612d3ff9480a2f700cb4028753504c45c0d9c8e0e571442b1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354128, "uuid": "e2882306-2e6e-4495-8279-381e216f4ca1", "comment": "Malware payload", "value": "cbf096dfed96263bdc9910cc2a601328f6af9236", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749354128, "uuid": "8fc0994c-5e33-4879-a412-4186c11e5a80", "comment": "Malware payload", "value": "fd8552c135e1e841a86ff1013bb0bb0243419661383e0e2f2dfb3096357a28ffcec4f09dd25bcb82d5352e0387fb8f81", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749354128, "uuid": "3987e558-99c9-4554-912a-fc4ee96e7e88", "value": "T100C4F1A377204F91C35195B209F389335AF6199706F39982537DEE107F20A68386BFE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749354128, "uuid": "06871e73-8c43-40ac-a5e3-24603910728f", "value": "12288:M57U0INmdtgOcyJXDOMzf03gdvZ/yCnEI7zb:W7v+mrY2xzf03yvZ/YI7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749354128, "uuid": "a0461ba2-a306-45f0-8b54-239678d312a5", "value": 592688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749354128, "uuid": "f0fdd3a9-ad10-4267-af6b-01072e7c467b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749354128, "uuid": "5e71005f-ed4c-4c6d-828d-94deddd5a3ea", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a119b60-4414-11f0-8bd0-42010a9c0005", "comment": "Malware payload (Mirai)", "timestamp": 1749351438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351438, "uuid": "2c5bf714-7740-4b11-b937-fb7ae7835d91", "comment": "Malware payload (Mirai)", "value": "306a4e38c360917b0db91e25fe7b2230", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351438, "uuid": "2cffb301-87b1-4ba3-978f-f4287c3cd578", "comment": "Malware payload (Mirai)", "value": "d54337112ba8fc24e73e532df00204e48fe5eac3bc79c08ddfe19e9950619ed8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351438, "uuid": "d3dfbe00-8334-4709-9e99-253898644463", "comment": "Malware payload (Mirai)", "value": "38d526ae3c0c8f92f23c7e97e8a042945e7d2a2e", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749351438, "uuid": "482030ec-d38f-4c0a-90fe-daba8583d383", "comment": "Malware payload (Mirai)", "value": "21503e8ccc13783e0e243449b110fe3a96a4dcb7baf2d947cd67f4a63485c3132e6d11fc5e851b7acdf0fcdf6ff7bdd6", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351438, "uuid": "6b64e71d-6b3d-4c69-a491-d1a8eb248022", "value": "T115214DCF40A8CE61AD408EDD35D30A2534C68AD956CF8FCBE44E05B9A1CCA0D7661F6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351438, "uuid": "1e13652a-3e38-440e-a6b0-43a029ab2d04", "value": "24:k9M5zLt+MB08xJxDkySxnkxnmkySx3xJkySxSx0kyCxjZ4xokySxDxNky8jn:kS5XEA0gzDkyOomkyOhJkyOO0kyejZ0w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749351438, "uuid": "33bca50a-2137-448d-88ea-147e82366938", "value": 1261, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749351438, "uuid": "8b4e34cc-4251-4e93-9b1b-563e20618e5b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749351438, "uuid": "3494d005-600e-4f93-91a1-bba1a1ae679c", "value": "f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4b27171-4417-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749352932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352932, "uuid": "7b20884b-8225-4786-8544-975b7a75b061", "comment": "Malware payload", "value": "d11c6f4fce2e244d509d2cbd7b92c0b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352932, "uuid": "2eb572a3-656c-435e-8041-b3f8d8a710a7", "comment": "Malware payload", "value": "d5e14b753434e86ff99d56d5a65354351235074d955d5b13030eaa9fd5d26e06", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352932, "uuid": "70934954-7eb8-41b9-80ad-3dab527eb416", "comment": "Malware payload", "value": "4d377638553d6609bdc94403f51c852c919c6e69", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352932, "uuid": "930c4aa0-9335-4b1a-92ef-05847dd058c3", "comment": "Malware payload", "value": "c219279aea061bc234882e6ec67d766d2bf63bcd6182db2749a0449a4cf283eb9b20c138d1f35bd64f8ed0aa15fbb4bb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352932, "uuid": "368367ec-b6b4-4e49-9bec-4919b636a8f5", "value": "T141A40294E9819B62C2C801BFFF0F45BC77A31F69E1EA71068D16EB2662D745A4F7E400", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352932, "uuid": "88a27da5-4333-40aa-9adf-efd2e839a095", "value": "12288:ndLGtVtlmIHk6Rtx02O6R+9X8C5SGEzf:pGntlzJx02O6E9X8XG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749352932, "uuid": "52235592-eb44-40d9-ae4e-651315654496", "value": 480792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749352932, "uuid": "9d25b984-75f8-4206-a70f-8c5c60ea271e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352932, "uuid": "08b7c7da-6a38-43b6-914c-a2716fb253e2", "value": "arm926t", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "002d2c28-440a-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749347019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347019, "uuid": "cf6d323b-6ade-4286-bbd2-ebd5e28f211e", "comment": "Malware payload", "value": "c2158bbda44f17d29b6b811e05f5b269", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347019, "uuid": "44636c48-43ae-42e4-b1a1-11378175a64e", "comment": "Malware payload", "value": "d8e614a5e7863eb966f895fc5442fcf2e06d2ea2caa70ea0adff938c498c9c04", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347019, "uuid": "0a82e7a8-4fe1-4f39-a99b-e05cf92f0e63", "comment": "Malware payload", "value": "accc3ea8c61a0db471e4e2e6f667330cabdea0e7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347019, "uuid": "d92b6ad1-310b-4f49-93af-91921f2d8449", "comment": "Malware payload", "value": "16e3aeabbf0d17029d7dd35acf985c82fd1f81ff865e993f25b3a9df8082c61ff9099585bc76d7fdd05a1b13ed5af8a3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347019, "uuid": "bbf15afa-6de9-472f-b66e-bcbd771533dc", "value": "T18B548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347019, "uuid": "af356574-21e1-46d9-998a-e34413a7e2e6", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347019, "uuid": "014cb9fd-7619-4e5d-b943-eb49a72f7a0b", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqt5:CicLslsl6za+nSYWMh7mdsAB3ShBXc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749347019, "uuid": "d6c5dfb7-14d8-46af-a7f5-bb93520f9b3c", "value": 298803, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749347019, "uuid": "76e4cc22-c473-45c6-9843-1729673bba44", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347019, "uuid": "d79f0714-b565-4c45-bbae-f8ee13ac4d16", "value": "SecuriteInfo.com.Trojan.GenericKDZ.111786.27675.10701", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc39e715-4419-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749353830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353830, "uuid": "5913cc99-3936-4fb0-ae18-94706c0c5d55", "comment": "Malware payload", "value": "03051fe775edcdc7e8acb6aa0eae52ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353830, "uuid": "0d14cb6d-33e1-4808-b732-d2e805adff62", "comment": "Malware payload", "value": "de1feea75d963cc161b193737a52d82048d3333f027e97fc9154ed551770c77d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353830, "uuid": "a6ee5f6a-566a-47fe-8d1c-579b9c206c25", "comment": "Malware payload", "value": "a8a6ff4b59e888ca3da3ac73041c77c1fff67c48", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353830, "uuid": "0f9227b8-1e8f-45b9-b92e-3dd37410f32d", "comment": "Malware payload", "value": "c253c03605ae631c64c1bef669b25ec1ac553d578aa214ec792d0b8280afca1a809d1d4a9293d069a239de0a639cb2f0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353830, "uuid": "615cb1dc-8cf9-4925-ac7f-a342c4b76f2e", "value": "T1E0E412117F152032C9D21AF0A8B747B4EB914CD610B4D6777749EB222BF36362C8BB99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353830, "uuid": "9076b450-a800-4f83-96d3-a4b5b3d8466c", "value": "12288:XeBWVNQiXY8aap1qXG2YmzwcyxDKsFM+t9j+9+X:uQQAYLapnLmzwhtLy+t9j+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749353830, "uuid": "9335422f-077d-4c08-a207-97701b2dc606", "value": 657856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749353830, "uuid": "b0fc4484-0d79-4a13-88d3-8dfb9471ef5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353830, "uuid": "e82f056b-f76f-4c71-a338-0684684f8a4e", "value": "ppc64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f9a2b5e-442b-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749361298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361298, "uuid": "de473737-41f3-45cb-81e2-30b2c191f476", "comment": "Malware payload", "value": "e88adf5f518f5d34304b2c27304f0705", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361298, "uuid": "35740d88-231e-455a-ad02-aa19c75ab77f", "comment": "Malware payload", "value": "e48deaeb2aae9b21193ac2222f7629f568dfe334c2f1ba5bfad8f5fa15e2de02", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361298, "uuid": "a0c623f4-9b7c-4c3a-adab-43feeeb33fca", "comment": "Malware payload", "value": "d6020092952c9a9e25b714df82cffaf9d7c587e2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361298, "uuid": "5c6c0c50-2ded-4027-b794-fbe3f30612a8", "comment": "Malware payload", "value": "d14ba8c43e7eab4a9c0f2b56dbedb11ea35fd92c433e6ac20c712b9aa44f768494054094e120b5d004da5fc91fc82ff2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361298, "uuid": "ab33baaa-3b63-4ec8-8060-ef14363ad475", "value": "T137341264677D0F5DD6A977BC1906A8DB03C31B835093E4EBAF64AF823533079E90B168", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361298, "uuid": "23625e42-9515-429e-bf15-ed71fc429ab7", "value": "e5c56bf3f5caa19cd9f71f802afd6890", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361298, "uuid": "a658b834-7365-4400-b591-4ac3198f98bf", "value": "6144:7vjdgADwOwp03U4SoBTWk72LRoryd+aKX:Sq/wptF26kaLRLMZX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749361298, "uuid": "a650c7da-d44f-4d9c-a360-b38acb7b217c", "value": 232356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749361298, "uuid": "776cd7d5-4303-4cea-afc6-f1876e958903", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361298, "uuid": "8741d2c0-de1e-425b-ad74-30c8ed3f9565", "value": "SecuriteInfo.com.Win64.MalwareX-gen.25519.5253", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac9f3182-4415-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749352032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352032, "uuid": "42f849be-60a6-4b6d-8f5a-9058c48b6dcf", "comment": "Malware payload", "value": "91ddda3f1cafa51a1f66eb1e4a380411", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352032, "uuid": "8572f12c-9b0b-4391-bd82-202f97855d54", "comment": "Malware payload", "value": "e4d020802427488e916bf78653b0e8940728d4e456abedd0effc59cae0fa7ab7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352032, "uuid": "995abf0f-3390-4478-99ee-fc49f3369087", "comment": "Malware payload", "value": "0f0c7240e8394f5db2a7b129ccbd626aedc12e97", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749352032, "uuid": "3e4809fa-3e71-4b26-8bd0-4c776169ae4a", "comment": "Malware payload", "value": "7282388ce3883a0e6e82684b8f0f3154e2ca3e02cd2dab929b646415ab8c7fc52fe8e3324a513dee04f1075c47e6bac6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352032, "uuid": "a72c93c3-9ae3-4222-b43e-1de7b12a9696", "value": "T1BFC42241EAB7C0F2F65349320103E7BF8F33C9099165D2A6D742F661EDB1B424A9E66C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352032, "uuid": "521ee8c8-6c26-4d6c-b027-10c66ae58072", "value": "12288:5D+Azf/CVCW3ISw+hRNb3W/aTyA9VV/cZWLnR98V+:5D+AznCVNIZ+vNbG/WYWrR98V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749352032, "uuid": "5fe37f55-5c79-4efc-a6bf-d120fa714f68", "value": 587764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749352032, "uuid": "4d63da7a-6750-4ee4-a54e-7c4a43990aca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749352032, "uuid": "47353368-65a6-49b3-bc83-c20d5fa279ce", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e080736-43fc-11f0-8bd0-42010a9c0005", "comment": "Malware payload (RemcosRAT)", "timestamp": 1749341190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341190, "uuid": "a2ceb1c4-5738-46bd-9655-96380510b064", "comment": "Malware payload (RemcosRAT)", "value": "1eb83943896efb099aecafe9caf38ccb", "object_relation": "md5", "Tag": [ { "name": "enermax-com-cc", "colour": "#3C0524", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "flexiplast-cc", "colour": "#FE1AA5", "exportable": true, "hide_tag": false }, { "name": "hbws-cc", "colour": "#7E51B6", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341190, "uuid": "94eb1476-c75e-4fea-825e-3d8961c5539f", "comment": "Malware payload (RemcosRAT)", "value": "eaeac3ce9078d326c6cb1ce660e2c2dd778173dd1ba269f51af84dfbb18a5fb0", "object_relation": "sha256", "Tag": [ { "name": "enermax-com-cc", "colour": "#3C0524", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "flexiplast-cc", "colour": "#FE1AA5", "exportable": true, "hide_tag": false }, { "name": "hbws-cc", "colour": "#7E51B6", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341190, "uuid": "3397b3f1-ff2c-4df0-871c-25787fc122f9", "comment": "Malware payload (RemcosRAT)", "value": "38f031a88d8871dfd590623a9ac6600509f1da2a", "object_relation": "sha1", "Tag": [ { "name": "enermax-com-cc", "colour": "#3C0524", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "flexiplast-cc", "colour": "#FE1AA5", "exportable": true, "hide_tag": false }, { "name": "hbws-cc", "colour": "#7E51B6", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341190, "uuid": "4fef0306-e9ac-43af-ac7b-6bdb32d3f647", "comment": "Malware payload (RemcosRAT)", "value": "bfeb7c4f163386235cc84da4403837c70448bf301d00ff271cca6d2ebee56a4d454a657ff0b25a3ec7be1320bee5b76c", "object_relation": "sha3-384", "Tag": [ { "name": "enermax-com-cc", "colour": "#3C0524", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "flexiplast-cc", "colour": "#FE1AA5", "exportable": true, "hide_tag": false }, { "name": "hbws-cc", "colour": "#7E51B6", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341190, "uuid": "8e0decef-6e99-44bc-912b-af977ecde5a3", "value": "T149E533033B8D9FA2C5969B3EC8F6112457617AD368F3CE562D8F6B460C33F628161663", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341190, "uuid": "c7308cab-63a7-4db7-970b-0e671de7b021", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341190, "uuid": "132109e4-c966-4492-bf89-5c0d7d1c0847", "value": "98304:auUKq+RClboH0aBCTtpfznYgFVSXuUYj:rDqPluzBCTtpfzYksX9y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749341190, "uuid": "18ee135a-914c-48b6-9040-29d9bb2c5fb9", "value": 3256832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749341190, "uuid": "d6d6a57c-3919-4ff0-bb00-abd4d47edc5e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341190, "uuid": "d5f87793-7949-4f54-a1f5-eed6f34dea0f", "value": "egobia.cmd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4232605b-442b-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749361303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361303, "uuid": "4e31f95e-63a7-4add-9452-1a8b8ad046ae", "comment": "Malware payload", "value": "5e4e5ed0acc9b1129dcafe2e28894d88", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361303, "uuid": "adffb539-d83c-4a8f-b696-80ca6cd62674", "comment": "Malware payload", "value": "ee37e9f63b4c40517416fe7a2bc308819ec8cb78a30936e99eec37767c19b199", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361303, "uuid": "674fef13-ff16-41d7-b8c5-e5dda577f8d3", "comment": "Malware payload", "value": "2f308d2246f47de7b3b674e82fb6171dc259b598", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749361303, "uuid": "7fc32417-57d3-42a2-a5cf-bef8b7a25283", "comment": "Malware payload", "value": "ad2be0662f8844610a2763c4b3e656ed3c17e4042191770b4113c96c2f0b7082ef5fdc1c1f825aeed89e8f5c95993a32", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361303, "uuid": "e3e1128c-bb43-476e-b116-49948968f7a4", "value": "T172548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361303, "uuid": "386ff30f-eb3f-4344-bbd7-0aecf0426d3d", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361303, "uuid": "77896c79-dd0b-487c-bdfa-04e28e93d8e0", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqtp:CicLslsl6za+nSYWMh7mdsAB3ShBX0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749361303, "uuid": "2b358d8a-dcc9-4e81-91fd-7c02d6881b1a", "value": 299245, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749361303, "uuid": "e69e6c97-2389-4ac3-bf85-f3ae5efc018f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749361303, "uuid": "75d92c20-005e-49b9-a022-8602f935f123", "value": "SecuriteInfo.com.Win64.MalwareX-gen.28956.6274", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e6fa185-43fc-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749341137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341137, "uuid": "d61ed798-b4ab-4bd3-b9f4-69f7f6ab911e", "comment": "Malware payload", "value": "d67f52a0272190b4350aa248951e2850", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341137, "uuid": "29159e57-ec35-4158-9557-7d121530ff5f", "comment": "Malware payload", "value": "f29f78476b2ba3bc2e94e84bbb5ac5aa7ff74042cc99e22d9d2e053028bafa75", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341137, "uuid": "ac63992e-204b-4fe4-ad15-a38ff2512ca7", "comment": "Malware payload", "value": "9228e672a9f1f5644c2b16d866c223c6bf3ad291", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749341137, "uuid": "0cfffd33-7e4f-4107-83e0-2aebf8f0d80d", "comment": "Malware payload", "value": "39de0716f224588c77f2c4982eec8903861f46cb9ee10c437e9306bc8b0feb065fe16b7f9a0899efa0f6bd9a3578ac2a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341137, "uuid": "e32ac9f0-0b10-4330-812c-64e3a061789a", "value": "T1B1548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341137, "uuid": "eeca5057-276e-466e-9dbc-16fed0970088", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341137, "uuid": "1de4db32-638c-4abd-88a3-77059cc24de4", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqtY:CicLslsl6za+nSYWMh7mdsAB3ShBXb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749341137, "uuid": "8cf5c524-e438-4301-998f-72a1ae6fe914", "value": 298398, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749341137, "uuid": "44f8740b-8f4e-4518-ac6d-6c156d2eb590", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749341137, "uuid": "2e8c041f-9a4a-4126-9596-770fbea24186", "value": "SecuriteInfo.com.Trojan.GenericKDZ.111786.6193.32101", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e42ce5f4-43ff-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749342677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749342677, "uuid": "818fac0a-48e0-44b4-aaaf-0fc6f3562836", "comment": "Malware payload", "value": "61e42b169f154621ed0a1d296098283b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749342677, "uuid": "b0d1c17b-ebde-4c32-898f-925958d48398", "comment": "Malware payload", "value": "f364f87cf00b2b807fa281ce0b2b137afb88728f97af21d52f632c67f0274899", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749342677, "uuid": "ac1bc7af-50b7-4d34-aac2-451b9d346bd1", "comment": "Malware payload", "value": "0e408aaf6c87da8aa84d103000b48f59e5284c9b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749342677, "uuid": "a2d9e7cf-6efe-4b4c-8451-2dc2f168021e", "comment": "Malware payload", "value": "313d5e90433d118a31d003befa5d0b4c03cfe629905d20dcfaec0f045ca7d617354dea6e67b4f1686658d844af24053e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749342677, "uuid": "393c310b-6559-42c6-8f6d-694c2a4b576f", "value": "T1A3548D49A69E0BCDCDA4B2F8267149AB17D31B630813E467EB3C5B87362313DFA47464", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749342677, "uuid": "e813730c-6ede-4554-8e35-58fb349c72ad", "value": "78c54cf27f80186f2ec7bd8323b3ec0f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749342677, "uuid": "a4b724a9-3a42-4f1b-8140-49df2a37a3a6", "value": "6144:U1NUcZ9gfSMlOnTEKb6tYf2a+npMFlxiWMhxmODq34mdUQk/A/tTRZbS3R5nXqtq:CicLslsl6za+nSYWMh7mdsAB3ShBXt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749342677, "uuid": "e5630b80-3542-4fea-b1d4-8d09275e74c0", "value": 298660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749342677, "uuid": "bbf3f3ac-f7d9-4dcb-ab4b-c7a0d76f8b3d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749342677, "uuid": "9ffc0920-715f-4246-8ce6-f006cc667249", "value": "SecuriteInfo.com.Trojan.GenericKDZ.111786.3619.5144", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3aa5b995-440b-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749347546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347546, "uuid": "172a8a1b-aa7d-4de8-adb7-5d736f24e1e8", "comment": "Malware payload", "value": "b1bd13b570b299fa4a3aa66302d60351", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347546, "uuid": "9d10f3f7-c521-4121-af8a-4981c0b2803c", "comment": "Malware payload", "value": "f40aa6754bd5d64bc43ea2f891167daa05a459e926ba305d8584992481c842b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347546, "uuid": "9c3493a6-1146-4b73-82e9-7f45b7b1dc6a", "comment": "Malware payload", "value": "71acad54c753239e70eea93937b33277d1b1c69d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347546, "uuid": "95a2c26b-5e41-4cd2-bf47-a0feed734f30", "comment": "Malware payload", "value": "4bb22f995791388da55d9ef1c2139a65fe713763d2cf7d2ae407771d6fb1531d763943e9543eb9647714de5fe1531f25", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347546, "uuid": "23c561e1-cb3e-4d95-bf1d-1f6a466b4d7e", "value": "T1F70494896FA13FFFD81FCD3301A58A0A119C5A1A53A97F7B6A34E404F64724A49E3C5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347546, "uuid": "fa3bf96b-f849-4986-8e0b-25914bbe6ae8", "value": "3072:uET/ZGjvEt20EWalGsiY0oEXUeCWzBe7V:uET/ZGjvCZO9GfzQ7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749347546, "uuid": "abd3ff26-1b33-41c4-b2c1-d72e4cbe7ee5", "value": 178520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749347546, "uuid": "542e839a-5931-4a10-b1c7-c132573e20ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347546, "uuid": "43dd9824-90dd-4cc0-addd-95fb5f10fc2c", "value": "mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3e5530a-4418-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749353360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353360, "uuid": "b781f4e4-7116-4936-84e4-a91fad1640c6", "comment": "Malware payload", "value": "dc21911858e9204b3b4ff436296b7a4b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353360, "uuid": "cefa9033-9422-4ebc-8a57-45d6eab6853d", "comment": "Malware payload", "value": "f659e3dd4b42030fce32e953ccd21e76dbbe544234f0a9aca92c20dd92494788", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353360, "uuid": "e193469e-d2d1-4751-82b5-fd015a12e2fb", "comment": "Malware payload", "value": "46efbdef8e0bc57a3e34639c7531324f84645732", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749353360, "uuid": "2ea6d9dc-5262-4845-b872-180a08624ae1", "comment": "Malware payload", "value": "32d4d3a3cb9090bb0e13ecd6b91939f980743a9bc7c5fdae8c458eee0320fdc6d880ba68f29d4b566a09d18969023e84", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353360, "uuid": "29562aea-6f59-4f4b-b181-8aa88c300d07", "value": "T13C341264677D0F5DD6A977BC1906A8DB03C31A835093E4EBAF64BF823533079E90B168", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353360, "uuid": "379a5c18-bfad-463d-860f-89c679501a60", "value": "e5c56bf3f5caa19cd9f71f802afd6890", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353360, "uuid": "da91c434-d48f-4853-a27b-ce3899b370a3", "value": "6144:7vjdgADwOwp03U4SoBTWk72LRoryd+aKG:Sq/wptF26kaLRLMZG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749353360, "uuid": "413c3fee-d387-49c5-89aa-3567d4f8b05a", "value": 232084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749353360, "uuid": "b1fb3128-3335-4dd6-baaf-f0c5c8847644", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749353360, "uuid": "7bfab85e-e11d-48f2-9e9c-7a1974b3a255", "value": "SecuriteInfo.com.Win64.MalwareX-gen.4332.29822", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed160f35-440b-11f0-8bd0-42010a9c0005", "comment": "Malware payload", "timestamp": 1749347846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347846, "uuid": "4d950f04-43e7-4171-ab61-c41d252f9706", "comment": "Malware payload", "value": "5786faaae4dd12ee58672ca7f86b2a27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347846, "uuid": "e8a3982e-4ba0-42d5-b0fb-ec6b11f56357", "comment": "Malware payload", "value": "fa30b4263a65c7edac7af34f7d91236d5fb8b45445cf9209fb290af9b55f528b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347846, "uuid": "3508bc67-00c4-40ca-8c19-be3dee92de85", "comment": "Malware payload", "value": "18804598727ffc57a8cf1cfecca30e411d907137", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1749347846, "uuid": "78165061-b3a0-4d99-b36a-c8d2fd347e4f", "comment": "Malware payload", "value": "df243dffe058b6d53196a00312597e515904271c3d0e879805a96e498649b4124a445e8fd30f16612ab0113a23bbe49d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347846, "uuid": "3b80b1bb-01b6-4805-b21b-65dd2c68c5c6", "value": "T111E412017F152032C9D21AF0A8B747B4EB914CD650B4D6777749EB222BF36362C8BB99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347846, "uuid": "1de3041d-c9fe-42a7-9d6a-01df27cd0a24", "value": "12288:XeBWVNQiXY8aap1qXG2YmzwcyxDKsFM+t9j+9+X:uQQAYLapnLmzwhtLy+t9j+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1749347846, "uuid": "867a7c01-e61d-45ab-ae3b-60e917a3d6e7", "value": 657856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1749347846, "uuid": "648622e5-a5fd-454a-8747-879d3a268bbc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1749347846, "uuid": "46be7d5a-b03c-471c-a3b9-fa80313697b9", "value": "ppc64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }