{ "Event": { "published": true, "date": "2023-07-09", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2023-07-09", "timestamp": 1688947382, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "2f6f0182-4d11-4c89-888c-fdf993858841", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afb816a8-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884052, "uuid": "705e8232-6976-4b1b-ae0e-53def567b6a4", "comment": "Malware payload", "value": "83e5113047675b08f27829eb03ff58ed", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884052, "uuid": "d7ceb8e4-47a5-4335-a9bf-44717e55052f", "comment": "Malware payload", "value": "0114d3c8b2fb4a0678bf5afed8da8ff996b06cbd0e35c24884a15e419bdcb742", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884052, "uuid": "e33316b5-fa11-44db-9c80-5842c6222a79", "comment": "Malware payload", "value": "c1cbbf50d555067c07814548a534061294d10d82", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884052, "uuid": "2d22db83-30cf-45c9-88f4-032ccc77d9b4", "comment": "Malware payload", "value": "369aee8eee54db8a15811da1edfff06245caeac8a42c756b1fb5c8f24a2b93e037b44d00cdde07ba6ecdd886336228b8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884052, "uuid": "1dabd9f0-7c03-4198-91b6-6b1094d99b7d", "value": "T1CB6533BBE241CEA3F67A1371C3B74D758F1ADE9F49041A620BA7784ABE71344DC1A091", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884052, "uuid": "8c32b3ea-f94a-408b-ac41-7ad3023b6d3b", "value": "7fa974366048f9c551ef45714595665e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884052, "uuid": "a1634211-9ea6-4924-9d8f-0c3d30de0993", "value": "24576:tcPFZUryBI8aFqaxuRDoragmC4snz9b4WbYWi7i7gwnvZZRlR2zP:+Cr+PaFqaxQDoutCr54RWi+7LBlR2zP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884052, "uuid": "7756b80a-8726-4f12-8993-601fdc6abfbc", "value": 1535007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884052, "uuid": "28582e98-dc62-403a-ace9-a940c24cb41d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884052, "uuid": "7aae0296-07b3-4825-8bbe-0d43d2a1ea26", "value": "SecuriteInfo.com.FileRepMalware.25426.8896", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7346b6ad-1ea2-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688939356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939356, "uuid": "229e8782-d01c-4916-9f6e-b42581112f4d", "comment": "Malware payload (Mirai)", "value": "a73eccaba82abef0cdc7776d57508cc8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939356, "uuid": "6b7e7e55-6d71-49ff-862a-84553c1f31f7", "comment": "Malware payload (Mirai)", "value": "018e851fd31ad0b574b22e92f2b62a9f7fd1302a94ff2e9a5d12b98815486ea3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939356, "uuid": "3483bf5d-24b7-4c88-83f2-837ec1d62122", "comment": "Malware payload (Mirai)", "value": "f85084aa235310ee62a250c305984043d8b9d098", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939356, "uuid": "4bed0ea8-e744-48ca-88ed-55cea8a82f3e", "comment": "Malware payload (Mirai)", "value": "4add51b6ce98c2b93ed1b0df755edabb1ad775ca91759749d478790894f702180efe382756bfd06e19994b67376efec4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939356, "uuid": "5e074d52-584a-4852-9e49-4e008a272ac3", "value": "T18A63F85AF8819F11D4D526BFFE0E5189331367A8E3EE7112DD205B2567CAA2B0F7B402", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939356, "uuid": "fbad1619-3565-40f3-8fe4-7f743c77fec0", "value": "1536:EpnVULTVNDMXs3SbCtbH6dBn1XArtCyolGue9lGBiqMbxsp:wULISSi76P1XArtCy/65MbC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688939356, "uuid": "1f36fa4b-e715-4317-836a-f21a3d4c21fb", "value": 69740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688939356, "uuid": "776adb34-7b15-4258-b47c-8eb5afdc95bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939356, "uuid": "81de3e5f-689d-488f-a225-5baa61ce722f", "value": "a73eccaba82abef0cdc7776d57508cc8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44936a1c-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907924, "uuid": "fc8d2ee4-292a-4135-86a7-e7fb67280ba8", "comment": "Malware payload (Mirai)", "value": "5c52e49d50d680920043643d236302bf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907924, "uuid": "a1e68705-b8c9-48bf-acea-bc84dcf8b23c", "comment": "Malware payload (Mirai)", "value": "039dbf1dbbc54fc1c01e64cf740c1794fc31b46bd4c322424340af9cc53bae78", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907924, "uuid": "d1d13a56-bb68-4e51-88cb-b2a7561ae893", "comment": "Malware payload (Mirai)", "value": "2caf9395a01ec57d459c1a33b79758432f0545bd", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907924, "uuid": "e0e25287-ad1e-4d75-b9d5-e71d5cbe817d", "comment": "Malware payload (Mirai)", "value": "6bf301016aecf79f4074d04a4da53477abb25886126578fb9b45f9f79f57baccd271c0233d520a6855cfd274021adfce", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907924, "uuid": "2a45abee-ad2e-4104-8e30-f118196d7b51", "value": "T1C0534B41F8825623C6D112BBF66E428D3B3617E8E2EF72139D255F2137C682B0D67E41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907924, "uuid": "38f0256d-caf4-489e-93e7-7787f505473a", "value": "1536:4MHrUuQwkKQdv23QROR7PBsfJLAz50t2vRrD:4MHc5wAgRzBstANBRrD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907924, "uuid": "143b4812-fd3a-426d-931b-dc2eca454cd6", "value": 64456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907924, "uuid": "13798ace-8343-4261-9864-765b472db640", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907924, "uuid": "66b6f3fa-d97e-4d94-aa37-379b59a86a0c", "value": "5c52e49d50d680920043643d236302bf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "201964cb-1e57-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907004, "uuid": "9967eb82-8f29-455f-98bb-0efcb33f06ee", "comment": "Malware payload (Mirai)", "value": "3737e175940cc2643c3bcfd65848292d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907004, "uuid": "3b93dde6-a077-4c6f-8148-ca690f387d60", "comment": "Malware payload (Mirai)", "value": "03c14a6743087ba4b9e141f7cd15afb3643063a68d6751438bcb99d899e40ef9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907004, "uuid": "fc84402b-4a7f-4e03-98df-d617542e3b49", "comment": "Malware payload (Mirai)", "value": "89088178e53b4d45da5fc986a7d9eee26298ffb5", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907004, "uuid": "5b0adfd9-2498-4f1f-806d-72b9d87e4680", "comment": "Malware payload (Mirai)", "value": "2282f02988f52e4aecf7de962541eeab2d141389ffaa4a8c2c0183979599f225511349be80a66bf401f30fae35654a2e", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907004, "uuid": "c3266cf8-711e-4288-b760-30bcffea0d3e", "value": "T1913302A267AE2AE251B04777FC33AC1966EC17F55C6730DA2CF0991967C58060FF2782", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907004, "uuid": "73d9fb61-efe5-4b7f-a6ba-9e03b909f927", "value": "1536:d9O/ZMAXIxNUk0VLcPqF1aBexo4opKZb4:d9O/ZNKyhLGqFUFF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907004, "uuid": "229cb425-bd86-49e4-a12e-4b65aa29b433", "value": 52512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907004, "uuid": "93b465bb-8309-4904-8fbe-2dc5cfa2189b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907004, "uuid": "29475149-0717-4449-8b68-d799d406b0d7", "value": "sora.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcecd76f-1e06-11ee-b3cf-42010a9c0076", "comment": "Malware payload (AsyncRAT)", "timestamp": 1688872532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688872532, "uuid": "faf52ee7-ea9f-4de5-9692-a2ee716ed471", "comment": "Malware payload (AsyncRAT)", "value": "cde6dc8a1312331d5bd70292bce28214", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688872532, "uuid": "ac7c904e-093f-417a-9850-1be06373ed42", "comment": "Malware payload (AsyncRAT)", "value": "068e0ef83a8dda2006d9d9a0767af630d21b4a4ef8a4c51cf5f45a342b78c3e4", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688872532, "uuid": "90a42f22-9958-4bc1-b1b4-877fe713eda7", "comment": "Malware payload (AsyncRAT)", "value": "d01b5b21b9bceddf2edc206ed6fbeac3891c4f36", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688872532, "uuid": "9de4c95b-19c9-4a91-b783-7e6467d2d44e", "comment": "Malware payload (AsyncRAT)", "value": "c6c089c49f66456bb16b259fdf9c66851941fd91329d518cb73745145471bbdc2e3f08f5dc812f0f4f5f14c0e00d6ea8", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688872532, "uuid": "8eaec6d1-618c-4758-b8fa-d697f307286f", "value": "T14C85E75CF8EF838DDEA4487785F553AE07B08821F862293DB99D576649108DF8FC062E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688872532, "uuid": "2e8cfe57-2efb-41ed-a0a5-3570dad38f09", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688872532, "uuid": "31b04a2d-d7e3-491e-b8ec-6304ef996c8c", "value": "12288:Y3NtuhzhDe+SQaAhMTO9UWSJmOzAwLk0dPuqvGet9rOqceT8f:vpSQZGKUVmOzRdzDZc48", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688872532, "uuid": "452312a5-e7b5-4271-88ec-a31adbd32f3c", "value": 1863168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688872532, "uuid": "827e8867-a16c-4ba6-a36d-33e187073cea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688872532, "uuid": "1f5cfec8-6413-41e4-b116-9c2cb1c1be6b", "value": "068E0EF83A8DDA2006D9D9A0767AF630D21B4A4EF8A4C.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36db0c86-1e9a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (njrat)", "timestamp": 1688935818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935818, "uuid": "5d3fb94d-ad28-48ec-8a30-268d2f244d08", "comment": "Malware payload (njrat)", "value": "3e044d35f256bcbc56c05cbe7fcfaf5a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935818, "uuid": "eae8ade5-3a24-4b8a-8595-110cc2df3d86", "comment": "Malware payload (njrat)", "value": "06c4dc9065b42162d56b8bab99d94f768f1a6cb40e5248a79866fb4a1e8e529c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935818, "uuid": "8fda7b4e-4cf8-460b-9bb4-afbd2f684424", "comment": "Malware payload (njrat)", "value": "92586bfbd301a89bf2362e082b5a4a6417dd527b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935818, "uuid": "201ecfdf-c831-4617-9531-8fce20ef4b0e", "comment": "Malware payload (njrat)", "value": "e13eea4c338a5e0f77ed54cad7ddc7f3038815088e5d9e74bb14d84248ddef19bc58fd18cecf3a192b66fc6b48d751b1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935818, "uuid": "d158f2f9-58e0-4f0f-94ee-31e07f0a5472", "value": "T1A3033A4D7FE18168C4FD467B05B2E012077AE04B6E23D91E8EE564AA37636C48F50EF2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935818, "uuid": "58dd8a68-dcfd-4f39-8acd-9ddfedde0bef", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935818, "uuid": "b97edea3-153d-456d-b46b-c4c47cc74eba", "value": "768:lryQw7zPOTUv3XI3MerM+rMRa8Nu5t/t:lhoPOY/XIch+gRJN+t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688935818, "uuid": "026928f7-1b40-4b45-8e79-81616ea9a448", "value": 37888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688935818, "uuid": "d1e365b8-32c9-4e02-aa32-2c255d2af5ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935818, "uuid": "3c3aa7b4-ddbb-4cb4-823f-51e42c8d758a", "value": "3e044d35f256bcbc56c05cbe7fcfaf5a.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ae30588-1e30-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688890379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890379, "uuid": "3f622d05-d146-492e-9f39-f9ec3c29aefb", "comment": "Malware payload (Mirai)", "value": "2da1ec4c6e2117529f5bad8c94237f22", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890379, "uuid": "e302d535-4391-4404-b302-1b43f7810e9d", "comment": "Malware payload (Mirai)", "value": "081e33ecbcea049ae3f2b329319115b60f09267ada24c2822ab0002daa315bf7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890379, "uuid": "5e84de03-7b2f-43ef-9dfc-82391e5a94a9", "comment": "Malware payload (Mirai)", "value": "40a6eaa6e1823016a6fc9a9be50892dba078fe2a", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890379, "uuid": "943f9884-43c2-477a-9bc4-e95159ff4c44", "comment": "Malware payload (Mirai)", "value": "b8fe54178448990cadbdef1357732be3d02aa5eb8f5edb09986a4133840beb25c6c0ff4357e2dda8224c36fccd64b39e", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890379, "uuid": "3808c1bc-9e93-41d1-a328-d7a26c983eb7", "value": "T12BE33C46EA418A03C4D61775BAAF42493323EB64D3DB73068928BFF43F8679E0E67505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890379, "uuid": "12fb2afe-0647-4147-bbfb-b1862dcf5adc", "value": "3072:s9NVMfhKnD4aJq5oI9MQgbaTAS/nESvTKM/9a5py:s9sfhKD4aJq5oI9pGGfESvGM/9gy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688890379, "uuid": "adf1111f-4cbc-41b3-aaf4-5121ec99fa65", "value": 149205, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688890379, "uuid": "5f619063-c13e-405a-a5dd-3b9020bfe552", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890379, "uuid": "2bd68b68-5bed-4a75-a950-8356f3cecba9", "value": "arm7-20230709-0812", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a43b243-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898404, "uuid": "74eb2e20-9461-4d99-9fe9-262724cd47ae", "comment": "Malware payload", "value": "a9af921fae871e263915eec697cc0dc3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898404, "uuid": "3259d5ec-8ab6-49cc-a897-8b90e1cf1683", "comment": "Malware payload", "value": "095acff5fceaebcb8026d5dc628953ac226c8bf66aa1fbd929b2b569c9b937d2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898404, "uuid": "caf92cc7-d4a6-4049-88af-d80c8cfe1597", "comment": "Malware payload", "value": "b27a8756ba103c05098f9d638d60e8e454a77c11", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898404, "uuid": "b7ff5119-30fe-4963-aca8-24895479f94a", "comment": "Malware payload", "value": "b9f4d94c46bfc729e5bb6eeef94df987f74f7fe87f75b19ab2d417c617f37f9fb277a1821b31b6ab800664508d44a6db", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898404, "uuid": "e797e6d4-6e70-403a-99bd-ffa609368b19", "value": "T1A99375279EC02265F633C77642FEB2B264217CA37801F5DD759ABE7D0833A13A950A0D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898404, "uuid": "27d76137-8c67-4917-a3bc-2fe389ee3c29", "value": "5c55d83b58dbc1f7154223c32a893074", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898404, "uuid": "add55dcb-31df-4765-8147-0921e5bbd19b", "value": "1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNieRpUSx:vCjsIOtEvwDpj5H8zPq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898404, "uuid": "0b2103c2-5f7e-4520-b0c8-a8e0aa78bc39", "value": 89916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898404, "uuid": "7bbffa9e-1435-4369-99c6-a5f203d1281c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898404, "uuid": "4a50bc84-3db8-4a53-b56f-4ccf0455f87c", "value": "a9af921fae871e263915eec697cc0dc3.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22896f67-1e42-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688897989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688897989, "uuid": "33a4e874-c469-4cf6-bef0-4f576ff89b43", "comment": "Malware payload", "value": "0945d7008a24e5b7d36f92b3b80cbb47", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688897989, "uuid": "a776a5d8-1a64-47d2-9ee1-4cf79e5e9f31", "comment": "Malware payload", "value": "09d923348d083c130e8e26f990ba4c90022a2b26e6a9f0c55ac78420f84089f8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688897989, "uuid": "6b32870c-1ec8-43bb-860e-f63a83f430ce", "comment": "Malware payload", "value": "004527043c617d17c0360afae7c9e13226e008fc", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688897989, "uuid": "26ff09ca-7c03-4fd2-8ef0-edd0f53fce32", "comment": "Malware payload", "value": "66ac251116ecdeb2328dc369e9f8e382851a2247790795ccf755b593a54e4c5416aa173f7ec6cdada26ed225e0120eee", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688897989, "uuid": "8159cbb3-b6cf-42ed-a2c8-7ba6522d0486", "value": "T170864921BB4A59EEC15AC074C24B4B622A3178CE0B36BAFF45C455793E69AF41F3C358", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688897989, "uuid": "e3c8a61e-4b82-41ee-ac86-78de03a8b0ef", "value": "130511fe4f4b77ec807f4fb95c43c07e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688897989, "uuid": "859c9b28-dc0e-4dda-8ba7-98fc6c38aa91", "value": "98304:4ArbeCXUhnKY00tUK7G2TrDnJr8D7ylH+s1Ep5v:4ArbDUUJ4SDmB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688897989, "uuid": "90075496-dd69-4f5e-82e3-6a4138119fb2", "value": 8607744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688897989, "uuid": "b47ff7a4-8696-43bb-bb68-768bf8acbd10", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688897989, "uuid": "2d1cae47-f958-4864-83e0-2b803a0d2545", "value": "f.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20fab4f0-1e57-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907005, "uuid": "d4ff8edd-2aa2-4e21-bc7f-d6b5ababc26b", "comment": "Malware payload (Mirai)", "value": "160c39469a75490ec99dd61d4e381993", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907005, "uuid": "1ad2dee7-f88a-4cdd-b9c7-29130c23def9", "comment": "Malware payload (Mirai)", "value": "0a763aa97a43019133c270e0d6af56c7e0e3b36e08bd95b51749e644e336f2c2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907005, "uuid": "7ddb43c7-be30-4885-92ca-78410037c4c0", "comment": "Malware payload (Mirai)", "value": "f45c1004a595e4d182ebfff6792e3d18bd46dd69", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907005, "uuid": "c9bdd8f8-d9d0-4a5f-9883-213c804eb8f6", "comment": "Malware payload (Mirai)", "value": "65c4a49896412273184ae6761a7f6958044c7477353af18e4cee7a885ef50aa3016f56de0a8d9de05acbafb52e472879", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907005, "uuid": "788d4f3a-9235-4903-8d7b-0e75e2cf3005", "value": "T124C2E1BC3EFB6F83CA170035699CFE3382B095A5D35B7297B24441026C131E5BA67C95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907005, "uuid": "f7de07d0-d4a4-4823-a10d-aa3ad77136d0", "value": "384:MG1DMwk8JPyGNoDZsEXVZVBy6xIJSlSmknnLZddZ6TJfUVlMWEbo28tEe5mjrO/H:HMw4DZdFbBy6x3K/KdWnH5iOjT0Ns", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907005, "uuid": "36e05e18-d39b-49bf-a8c6-4fb66c98f8b9", "value": 28056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907005, "uuid": "6bda952c-23ef-454b-b267-d512948153fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907005, "uuid": "4addb65a-06b9-43ba-b6fd-69d85ecf37df", "value": "sora.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ebfc164-1e30-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688890386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890386, "uuid": "e4fc7ce7-e005-44a4-a490-5939870081b3", "comment": "Malware payload (Mirai)", "value": "6c6e450348aa45ff7acc4531b29932df", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890386, "uuid": "034e00dd-3116-46a0-b546-d2dd7a409ef1", "comment": "Malware payload (Mirai)", "value": "0ce88a638214082bd14464bafa920ac357e42db23975f19e64cab064c8e3f68f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890386, "uuid": "baf44cc9-1bdc-48b0-8ee6-c2301cb31cee", "comment": "Malware payload (Mirai)", "value": "4a696fc11aa52d921dbcd3a80599c38507a7217b", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890386, "uuid": "5951b55e-bddb-48f1-859b-4afcab62c9aa", "comment": "Malware payload (Mirai)", "value": "f920a1f4553767ce9e2056c6dcd618dc02388a6e38dcdae8b0ece58d62e403470f6869b1cac74c97fcdab90762da8040", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890386, "uuid": "ce438bd6-30d3-4f72-85f5-d3ae45a9a809", "value": "T1DA632981BC819613CAD5137AFA6E018D372663E8E2DF3217CE166F1033DA92B0D77656", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890386, "uuid": "7b5fd588-4ebd-41c8-8962-607b450179b2", "value": "1536:KiqTZrB3FJuz84duD6ak3WPwfDdf4BMvW:KiqTNJurLaw9PW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688890386, "uuid": "4c218717-e50a-4e34-b147-a6a64dd5f5dc", "value": 67580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688890386, "uuid": "3aa17335-ef36-4998-8de5-e0da43d07457", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890386, "uuid": "8bf1e416-e195-4546-81ff-26290583b29c", "value": "arm-20230709-0813", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a02111f8-1e32-11ee-b3cf-42010a9c0076", "comment": "Malware payload (CoinMiner)", "timestamp": 1688891327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891327, "uuid": "9308ccfd-af5c-4115-ae17-3963ea4b267c", "comment": "Malware payload (CoinMiner)", "value": "8b9ba32dabf89f7553b96e0b36d262b7", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891327, "uuid": "9152f396-4428-4881-9c64-358ec3477eea", "comment": "Malware payload (CoinMiner)", "value": "0f5a66c60bb919b8d626e18c6a53670f10978a89ede6104dfbccfffb35bc4ac5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891327, "uuid": "ada9ff9e-bf9a-41b2-a89a-974c8a619900", "comment": "Malware payload (CoinMiner)", "value": "33037bd71d5f1aab549dd1bd5c618b2f9892730d", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891327, "uuid": "4d79caac-f98b-431c-94b8-c8d1bf55312d", "comment": "Malware payload (CoinMiner)", "value": "480a047648f38ac0bb68198643d784e29943805cf52f2a335edf82dcc4894fcd120a112f3f363a3de577ec648de2c8e1", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891327, "uuid": "6f67d2da-bfad-42f7-b9fd-0175657c846d", "value": "T1AA45E111B5E1C477C973113309A4EBB95B7EF9300A625AAF23D41F7F9F30681A621E62", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891327, "uuid": "75e0ac19-3b35-4dae-9b2d-d3a722d21717", "value": "d269255e3849fb2edc6ab045f28f5612", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891327, "uuid": "044ff411-5570-48b6-8e95-703fe8a51713", "value": "12288:ekU+YjQRmxEhFkoFLXbJlBx3FkLsr3rl:/IjWSoh1lBxVkgrbl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688891327, "uuid": "e512a4f0-e6f8-4c13-8902-a1a25c89488c", "value": 1169920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688891327, "uuid": "8e1858e4-e478-4ff0-9db8-22d0b73a1ec2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891327, "uuid": "dab943b8-f88f-4259-9c63-afc1329dc5e9", "value": "clean_AutoSetup.exe.malware", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7320177e-1ea5-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688940644, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688940644, "uuid": "462c5f57-7d50-47c4-852b-b532388e6929", "comment": "Malware payload", "value": "f39b6cfbd0373de1008ba714bf49de24", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688940644, "uuid": "7a7f6647-acf4-462f-ba7c-21414a760ae9", "comment": "Malware payload", "value": "104169a70b4443342fea2349028c90b5dd65571cfdf0279941783599ccc3302b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688940644, "uuid": "e50acaea-95b9-492d-a435-40b36381f6f1", "comment": "Malware payload", "value": "1a6162157f2e54b5ef743e03440baa22423bc662", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688940644, "uuid": "5ce4a5a4-9b38-4019-956b-928367f989c6", "comment": "Malware payload", "value": "44f286ea9b4b922e4fef07a50b39b252e9f76f1c4c88c7376dd41b7a42545b4fab85528535d4571008f582b04ff131c8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688940644, "uuid": "4ec6b973-7eb6-4c5b-bcfd-e11c1745bb00", "value": "T1D8259E3139C18332EDD2E0BA02DFB525426DE4BC072646DB56C55BEEFA20ED16F32586", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688940644, "uuid": "44a84a27-a46f-4c8d-b2f0-c2d9932e8a90", "value": "2e7f2667392d8d1bd01896145ab96743", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688940644, "uuid": "8dabc2ed-31b9-425d-a74b-e86caae25b4c", "value": "24576:I09id6dv1xs2Vja/Y7hCTYes6kXXxLFFyNDj:pv1xs21pETpkXXxmDj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688940644, "uuid": "2bbdfe04-c0fb-443f-b887-8dc6f43e2fac", "value": 1031680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688940644, "uuid": "8a8cff80-9117-4979-a91d-cae9e0386759", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688940644, "uuid": "0c6ff696-e3e4-4644-a682-5a08ec8ef6bc", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "078a6c75-1e0a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688873892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873892, "uuid": "288bd617-7443-495b-b81a-551ff84a5e60", "comment": "Malware payload (Mirai)", "value": "22a5bb489c7c03c07adbba48315de2c3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873892, "uuid": "0d218a36-526c-47d4-a1de-09e9f588eb1d", "comment": "Malware payload (Mirai)", "value": "10b4ceddcde23c9d2810cbff974c70e686d12a59ff4f2910553ef049454dccc9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873892, "uuid": "49c7e026-0980-461a-8c91-31f6737ac64b", "comment": "Malware payload (Mirai)", "value": "81d48988378079da5aabda81ac9ccfbb6180123b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873892, "uuid": "041ec7ba-584e-4075-ba59-090b7244c14e", "comment": "Malware payload (Mirai)", "value": "ce5eaaa1ec6ff295599964490d61c6e59d4560d80b85666f10fa1689fa6dec4cb1cb766790cb576a8e60d6b17a5655a3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873892, "uuid": "62611692-42bb-4191-8524-15de7a8794c8", "value": "T1BE539EB9C0B8AD98D25C4A78B714CA3DE313940465E33DF6DA52CA67804BAEDF04D7B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873892, "uuid": "cad10098-f115-4352-a354-8f1b05862be3", "value": "1536:6/1XjsWwcaIwtLaA7M+/ulxLI1S/Sfs3KD/ABCrsFCCNIaa:6tXnBvhAolxLItf+y+CrsFCZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688873892, "uuid": "87d55ba2-9897-4143-a043-8422dc4cae3f", "value": 66368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688873892, "uuid": "e7f4e63a-98fb-4b6b-b33e-1630b7f5ebbf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873892, "uuid": "89a3ac6f-8424-466d-847d-d609435aee19", "value": "22a5bb489c7c03c07adbba48315de2c3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e33c7199-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898741, "uuid": "00e7e66c-e50c-44d7-9069-dd2a5d4efd41", "comment": "Malware payload", "value": "7dde85fb9e1645dfac179756497efc76", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898741, "uuid": "1ea297bc-c42a-4f34-9bad-dd47f8bb40b5", "comment": "Malware payload", "value": "1151b9d5a74343f260d5ad7ba1591168e5ef351d002c861833fd3ae92b24797e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898741, "uuid": "41ae8ebf-ba19-4b1e-a3d0-fced6961bc56", "comment": "Malware payload", "value": "921766dca25814dab38603aeec1275c1d0708e72", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898741, "uuid": "cf3af76c-3a2b-4066-bc7e-d46e1c17f4d1", "comment": "Malware payload", "value": "1e3cff15b399e1e95706076356c0e54823275c8fef907179844d1cf976a0cbdeb1e4849b01787c5815578c323ce002e5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898741, "uuid": "01f4e379-4b66-4699-bb6e-bc330d9116fb", "value": "T15F6302E195055FBCC04B77BB82AB74BC073DA1A18F4069C9EE42B618896B413BD1B303", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898741, "uuid": "8952a2b8-bca0-4762-b687-5738e28f616a", "value": "3c0e70bfa5f73f1f1cef484e2bcb5bf8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898741, "uuid": "caa701b8-f029-4843-9393-8da1a58c30f0", "value": "1536:/chlbKgSYQitxqt54Mu14sz/KjixAqS1cF/:EzbK1t5RkKjimqS+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898741, "uuid": "323ecdab-c4fb-434f-8df2-9e5c91a88c90", "value": 71168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898741, "uuid": "5a43db73-e09c-4fc4-be64-186351184c49", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898741, "uuid": "3f050ac7-2846-4319-b486-b640d3faf462", "value": "SecuriteInfo.com.W32.Keygen.FI.tr.11687.8428", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1aeba8b1-1e0a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688873924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873924, "uuid": "21e94e23-d774-4450-84cf-1dacd9c5d1f7", "comment": "Malware payload (Mirai)", "value": "16a9b47f0bba51c265bbfe514c43dece", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873924, "uuid": "65562bf5-1594-465e-b26e-12ca5eaef8cf", "comment": "Malware payload (Mirai)", "value": "11d63a8fe5f3716c11a5d6676ae1cb71e55d96b3a70f883da73073633a091acf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873924, "uuid": "1320a2f5-e9c1-4166-bf62-012dbf568deb", "comment": "Malware payload (Mirai)", "value": "9b42b240423c47e06272973add18e9dd63eebf6e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873924, "uuid": "608083e8-6f77-4187-8e38-72535d88a1d8", "comment": "Malware payload (Mirai)", "value": "1b75d4e53fe9057f561bec8e5d79dd62f3d70245d4a4bfc55399dbbb6d249703a4db1f41af83c266116863307a38fb78", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873924, "uuid": "f5647fc4-2031-43ef-94ce-762e550763c0", "value": "T12D832986B8819A25C6D517BBFE1F018E3302575CE2EFB252CD141F6477CAC1B0E2BA56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873924, "uuid": "4e279132-7e40-456a-b168-84a451bd5ccd", "value": "1536:S9nklw5BLG0ZNU3XQzO+3GwOxXGFV7suzVLV1SNYlIVLOIAiwxifXWdUg:DlABGXAOUGwOxKxhLVMNYfxifXWdp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688873924, "uuid": "6f508270-4750-4cd4-94ad-49d8b45ccb78", "value": 83072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688873924, "uuid": "e519d4f2-7170-4dec-bcb1-3b971d1560d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873924, "uuid": "44b99de3-9a1d-42b6-b8f3-8a1400a93a37", "value": "16a9b47f0bba51c265bbfe514c43dece", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42152307-1eb1-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1688945716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688945716, "uuid": "5ec07a41-3a3c-40de-9375-2fa00d1e0df2", "comment": "Malware payload (Amadey)", "value": "a360a5318a93a25cffac26e520664aa0", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688945716, "uuid": "ea4bbdb4-0c69-4eb0-8a3c-0d8d86d9a406", "comment": "Malware payload (Amadey)", "value": "11f92e94779bb92b48a6ce6b0f12e262b931ff2d8f1eeb6000d708b5f3059abb", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688945716, "uuid": "941c6d55-6685-46a7-af51-26ff29053088", "comment": "Malware payload (Amadey)", "value": "cd5a0b59554767b3d4433fe9b5771352309bd10b", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688945716, "uuid": "671d1a8f-538b-4bd3-a6b9-76853f9dfba9", "comment": "Malware payload (Amadey)", "value": "34d6c76029f9c49f2dd14f43a70cf04617cba7d48201da5a83a7c44e896b44abad433aa017d29a0009601f1ad4dca3d8", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688945716, "uuid": "0165bac0-323a-45b2-ac8e-5cb03b602198", "value": "T12D24F6267912C031D560A1B619F4BFF2C59CA824ABB049DB7B800F77DA122F73D61E39", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688945716, "uuid": "bbb22db5-0051-49da-8b16-30b62cfc3cad", "value": "f8cc61ade86cb7277d0ab974de6323cb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688945716, "uuid": "7fbc58a2-274b-4cd4-b53c-8a267c6986c0", "value": "3072:mhMCsw9/w+A4cwP+5OzutpHKGruONM4QuZA+67bi83eILfbq5kmh:5Cswq+AXYu7HGOSuZAlAILjq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688945716, "uuid": "b15adcde-070b-493c-9bc5-d51d33075e8c", "value": 215897, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688945716, "uuid": "3b040fd1-2327-4407-8552-dff8ddca487d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688945716, "uuid": "49703964-8618-495e-a89f-f70f332a971c", "value": "a360a5318a93a25cffac26e520664aa0.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11e3c435-1e9f-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688937904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688937904, "uuid": "592f8a37-c604-4b18-aa2a-7046dc1e3518", "comment": "Malware payload", "value": "e6fe15a776749d7413b976809b8dbd95", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688937904, "uuid": "93262357-30dd-44a3-872e-ca231cb78352", "comment": "Malware payload", "value": "125a4f683e757b589c46046e26adc54b5e08c24fbf3eca3dadd9ab21960eb6c0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688937904, "uuid": "6c2867bc-a352-46d8-9b95-f4b9dea42689", "comment": "Malware payload", "value": "70f07aec493e0e39dd0f23d39b6f750d3981d3a5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688937904, "uuid": "003128ea-a767-4e6b-80dc-bd4575657dea", "comment": "Malware payload", "value": "810c651f1ad6b1d5be1414b437bb4c36e84a56b7439e2dc00ae53e6a8ed7633f865df7794ec39aa1b2764af6b2ba7697", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688937904, "uuid": "f10884e2-9c35-41f9-b666-03a00487afc1", "value": "T1D164CF1272E0A876D4625F328D2AC6E02B1EFD919E653797321C3E2F0A701F1E672753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688937904, "uuid": "86bd43ce-aa5f-4703-920d-438fe4c89351", "value": "b8bb1998da6e1dd20543d0f6d4a62d49", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688937904, "uuid": "e9f236e0-6cbf-4991-b050-3710a1ce45c6", "value": "6144:bNpNdFnqoIo8amRGLRz0bGXq3jRTtGNussrFj:bhdFqJRGlQZXt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688937904, "uuid": "7679c307-47de-471a-a496-038a2d45ee55", "value": 333824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688937904, "uuid": "d90831a2-e286-4d8c-8ef7-57ff02b72d62", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688937904, "uuid": "df192255-99ee-4feb-bd2d-3baec630596a", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fb2c80e-1e9a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688935806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935806, "uuid": "c2391f73-1c15-45b1-8f0f-a41fcd33dfbd", "comment": "Malware payload", "value": "e85d91b65273e799f6ac3aae88825fef", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935806, "uuid": "790d24b6-5886-4880-a2fc-c4ac8253c048", "comment": "Malware payload", "value": "148fb00f39d47a3118cc39e299290c34d3e6ca42103cc62fef403f6e2ca36155", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935806, "uuid": "ec421986-3aef-43a6-95e2-01e9839737c1", "comment": "Malware payload", "value": "70e1bbeeeaac994a7735bc68ce05a892be0ad537", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935806, "uuid": "01ca8d64-d588-43d4-a5f1-42851096ec92", "comment": "Malware payload", "value": "cf69346e6f8f5c4bfe7b362509daaff7bb7cd53684dfb93dfd771f02e26fd1a758e669ac122c5a8466483e335e90f697", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935806, "uuid": "6d4b9102-7cf3-4406-9ff0-19d37f0a23c3", "value": "T194D2E170928A39B1C1B00131EA9C57DB468B29B4D0FF7277762114757DF718D3AA11EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935806, "uuid": "bd77f1a6-3472-4203-a825-7ad858bc80a3", "value": "768:wA4uBc0T/nVvqV072G+IFYoXHZCx3GZkUs3UozR:wPuB7/nVMYn+Kf57kxzR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688935806, "uuid": "507bbebb-29be-4937-8d27-b577082b3fff", "value": 29944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688935806, "uuid": "bc1fd224-f8cb-4dc6-8537-ea355423afb0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935806, "uuid": "216d49cd-4dde-4ec7-b58c-a475caa5f580", "value": "xd.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62cf8535-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907975, "uuid": "29b5eef3-f8aa-4e98-adde-8699e4f561b9", "comment": "Malware payload (Mirai)", "value": "1bb9836827a853a32500e9aa920cc16d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907975, "uuid": "50ab03e5-7192-472c-b82b-fe04875d7814", "comment": "Malware payload (Mirai)", "value": "155874eae6c30831cb4f60a7ce19a05564bca050855af4d2d38eb38e1d252230", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907975, "uuid": "5ab66793-4f2d-4bc9-8301-f6edc96c7b7b", "comment": "Malware payload (Mirai)", "value": "43d1184f5f3910290818c5bdd006277523fed347", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907975, "uuid": "e7c3e8fa-8011-4160-adac-b37839ffb1fa", "comment": "Malware payload (Mirai)", "value": "db7e30fdc8f7e616fd54f5a3e62f869320525f44acf0f35fb82304e45ad2cea9d85e47aee3829844a0739e92681e9ced", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907975, "uuid": "e6d797e5-b932-49ce-8f3b-6f1799f86158", "value": "T1AD433A80F14F80F5D44B0C706067F73FCE31E5A542A1D69EDF59AE76DE632825612A8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907975, "uuid": "b702be08-43f2-424f-8f89-31d2b9d33710", "value": "1536:C+YbIBNNJ3Nfh7Ct+9aqSbBgWG6TSGVfHyl7ECT:C/kBNNh1h+t+9aqy7VTSGVvy9ECT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907975, "uuid": "894329df-14fd-4b21-9df7-f779fa25a107", "value": 58544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907975, "uuid": "92a608e6-0437-42f7-84dc-8e9cff1f1b95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907975, "uuid": "dd4fb2c6-419f-49d0-8ed1-86a434d7b099", "value": "1bb9836827a853a32500e9aa920cc16d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05dd8b62-1df8-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688866158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688866158, "uuid": "4ab2fd7d-0b34-4499-bb37-a6fedec8b05c", "comment": "Malware payload", "value": "36b4f52a946b64a473a4b221335043d6", "object_relation": "md5", "Tag": [ { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688866158, "uuid": "28c2f991-d2c0-481c-a45f-645b1cc78198", "comment": "Malware payload", "value": "177e5bae78bcb7f395eab76065a87b1bc7780de122a732bb3ff6b754eb3ed365", "object_relation": "sha256", "Tag": [ { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688866158, "uuid": "b9b75b20-de7f-4bf1-94c4-9c9b9d786185", "comment": "Malware payload", "value": "08980fb459ce41730f73269ada68a309e14ce5a8", "object_relation": "sha1", "Tag": [ { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688866158, "uuid": "b04929cb-797c-4f6e-ab6a-c81e681a16b4", "comment": "Malware payload", "value": "1737bc8cc6e641948e6f2ec205bc4295877c4600aad3feca38ebd3043cc3482603c51130e2fa17f522b593a7714e481b", "object_relation": "sha3-384", "Tag": [ { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688866158, "uuid": "3f80f566-c701-408b-94b7-6a7a6cdbd043", "value": "T1C843A13CA321C44DA9736A3BFCE42F655109AF97EDC9B7C9041880973EF067A71146EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688866158, "uuid": "f8afab58-a7ff-4710-8ac4-bd94def86e8e", "value": "384:xLcWxhyvUvO+nNxGjVNN0kfGgy9/DEAtsOa5OLJCr1WOLuPlROH0a9LVoLyFSHrR:xKvKEXSkOWU+iVFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688866158, "uuid": "2cb0f637-b58e-41ba-8f9b-2fb09dba6ff2", "value": 58737, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688866158, "uuid": "e79ecc84-f054-4419-a3e8-d43644e8c38e", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688866158, "uuid": "9ec9d602-f062-49e2-b797-610487b51eea", "value": "SecuriteInfo.com.HTML.PhishingMS-AOQ.6053.25670", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d4b56f7-1e92-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688932501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932501, "uuid": "e19da869-95e6-4f80-92c5-b728738b77b7", "comment": "Malware payload", "value": "47d1ae54db3e04f8e39d6fcae3b1af76", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932501, "uuid": "a9efc5c7-7581-40dd-a2a8-18d2a4885580", "comment": "Malware payload", "value": "17a891138fffb4e21f8fd9857005e4246593c09cd80bbc86cdf9835583d302a3", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932501, "uuid": "abfbd408-5973-469e-857f-f9b08ede35f6", "comment": "Malware payload", "value": "9e57bdde152a23a4f4a0e6afc3c480ee101d6de7", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932501, "uuid": "c01f2df6-cf3d-421e-a406-0d8b25dc52b3", "comment": "Malware payload", "value": "f048f83a6887ba3c57a68f2d9f6474981c0ce7ef092560a21d26b5f1653473299e3f6249bfb11aba601992f64c7d90fe", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932501, "uuid": "1d350c67-1a28-4f36-88f4-ddd6d58cecde", "value": "T119F2E152CD477676C5D00E3EEBDC2549B37A01F4BA98B1A69D428180DEF620BB6FEC41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932501, "uuid": "8362a439-bf9a-4491-9378-f5e02c81b8df", "value": "768:whDX6J7CoCxUkKl2hSONxmKEBHxo4HeXcc6zMTu3Ut4:wZ67CbekKcwWZAHxo4Hicfo94", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688932501, "uuid": "cff2e35a-6c5f-4ea0-aab1-da3f1e6da1af", "value": 36288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688932501, "uuid": "2bde1e5b-7c96-4164-bf0a-a791dad2c1f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932501, "uuid": "9e134cc9-abbc-4841-af29-c3710e71af51", "value": "arm.nn-20230709-1954", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6aadf562-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907988, "uuid": "78e80761-0f7a-4a39-93e5-e30970465198", "comment": "Malware payload (Mirai)", "value": "3843ebe9195c7b23b7cccf83c3945fa0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907988, "uuid": "1f5cf046-45b1-4b35-9131-870ca573ebc7", "comment": "Malware payload (Mirai)", "value": "17f452298cdcedef0a992e6dedd513140b8f97a28b4f579c2456567b6e50048d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907988, "uuid": "d3f573a9-f629-4245-9fb5-e55f5c0051b0", "comment": "Malware payload (Mirai)", "value": "76bdb007ae41295591623b9b976d92c1722bf07f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907988, "uuid": "15653bd7-7515-47ac-a6ae-04dea68b36a3", "comment": "Malware payload (Mirai)", "value": "22d128c0560a7f4aa255488d420bcaf9cc55061356da0cbe97b4c26dcdcf0df437adc67bdcdc74f7922980134be3207d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907988, "uuid": "d6be2e38-296a-470a-a6be-9690a191fd1f", "value": "T12783C615BF550FBBDCABCD3706A91B1129CC568B22E57B363934C92CB44B24B1AE3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907988, "uuid": "aeec281a-07f2-40f7-9225-cae0556d299e", "value": "1536:JUtbDwXdMDHFwMen5RsOs0RoJZffV7EDKheSzr1+:JUtbDwXdpS0GJ0KYSzr1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907988, "uuid": "c3371ca9-6a9c-458d-b3ba-782d19413767", "value": 80916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907988, "uuid": "3cd90cbd-228a-49ad-96f9-8df28f07645b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907988, "uuid": "dfcb3f10-1f30-44ec-a0a7-a2b12f5c25ba", "value": "3843ebe9195c7b23b7cccf83c3945fa0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6ae2ba6-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884064, "uuid": "a52b9b60-a74b-421c-a15e-a15698fb9b00", "comment": "Malware payload", "value": "300de571f936b686986787ee44931347", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884064, "uuid": "771974d2-7632-4905-8695-d26189238bad", "comment": "Malware payload", "value": "1ebdd6ac73416dd66332fcfbaf9aac32af3f8b673d5cf4356a3456951436390c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884064, "uuid": "484cb28c-be27-46ba-b79c-cc3bfd7f5ad4", "comment": "Malware payload", "value": "c42fceb31735fec4f731978daf8b66e4086dd406", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884064, "uuid": "228d140d-6137-4275-a8ca-7dd07101cac2", "comment": "Malware payload", "value": "dbcfe06747004a69827f21cd310b9df71ac4da237e23db176804f785aa4d27917228c864f0595364d9fb756d4aa79fa6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884064, "uuid": "7f40f581-e41a-430b-b338-3e7c4aad146f", "value": "T10EA34B43E7E505BDF7B35B319869A137273FFE22263AC54AA86E8D4D1C315004BA13B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884064, "uuid": "6f932820-c520-4b36-9600-84386c7ef054", "value": "1536:C4BrqzoX0Id8WZ1w1MN6XhqxVoxyXG3IhmlmWTAogaUXcd:zqokId8yjYX0Voxy23IhmlhFd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884064, "uuid": "15f54be1-2cf8-42dd-9f7f-ef3fc44cfa76", "value": 98304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884064, "uuid": "94e5d5b6-4858-438e-806f-afa627ad123e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884064, "uuid": "a3fedcf0-83c5-44e0-a728-cf0f124fe867", "value": "SecuriteInfo.com.FileRepMalware.2369.774", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ed633bd-1e9a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688935805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935805, "uuid": "27723f2b-eae6-49a5-9a6b-e12142c7f297", "comment": "Malware payload (Mirai)", "value": "62253f31b0209e8f31107ff0f2e883a3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935805, "uuid": "b7a6fbe9-de20-4bd8-a4c3-460b33567bc0", "comment": "Malware payload (Mirai)", "value": "1ef35cf4d385f2b4ae890dfa21ff6aea2b6d629e1bc50e10dcd994941a2ab592", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935805, "uuid": "7b46aa76-2b13-462c-95cd-b0ca99293c95", "comment": "Malware payload (Mirai)", "value": "0732440a2db266a71bfc080d3e1178140315f0c1", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935805, "uuid": "c19e8ed9-1470-4174-8d16-68a8638aae69", "comment": "Malware payload (Mirai)", "value": "8dc23c9881678d7ab4343cfae2184f6a2b62bf99ef95e401b473e5d3c676d74863157566c09e8cf8d4ab8e9deb491f53", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935805, "uuid": "98be1898-4552-4c47-bd45-31c5bca0b85f", "value": "T1B1D2E0F0AFACEDD6C089B7309D9ACC5E70DCB8A21F3A54494A810D577126D02B6F4ED6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935805, "uuid": "41fdf843-3e8b-462c-a08c-e6a91b501fac", "value": "768:3N8f6tfoQmQAXV7E1QDvjnVAiSZd8H0GuOZk3RuOQqS:9MJXFl7IQjU6uwB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688935805, "uuid": "5d42d770-308b-4623-bdad-e4691938ebe2", "value": 29904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688935805, "uuid": "a50106dd-c30f-4976-99e0-ba2402bb688f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935805, "uuid": "29c8d7af-d29c-48a9-84b4-fd937af7a57a", "value": "xd.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ff07510-1eb2-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688946115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688946115, "uuid": "abdc89e5-9297-4d81-a9c7-684913cbf86b", "comment": "Malware payload", "value": "eb2df3c33f102a792068a28b122832ee", "object_relation": "md5", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688946115, "uuid": "fc8faad3-4241-4009-b8a8-3bbf400d354d", "comment": "Malware payload", "value": "218a819360df70ecc4cdbdfac4fbc0e49be3f4cadbad04d591a3de992617dac2", "object_relation": "sha256", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688946115, "uuid": "d8b316af-a82e-496d-9ec8-a019fb72ab37", "comment": "Malware payload", "value": "223aa8c734913b982826600efc10a1e298d1d337", "object_relation": "sha1", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688946115, "uuid": "49546f3a-66c5-4563-9dd0-93ab21010778", "comment": "Malware payload", "value": "ce5114b7f6a8a2ffde74c7db6faf824a3030184cb70bda299f682b3b0191bcdaf0273964d9f442c2b503c0d9144f5b3d", "object_relation": "sha3-384", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688946115, "uuid": "7d22fb92-79ce-4b74-b5ae-af34ddef5b34", "value": "T15331C60DCCCDEED7639454C4941A01953D7C0EC999E9C303F8DEEC0DEE6885A42B3940", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688946115, "uuid": "81c21cbe-73e0-49cd-8972-0375eac21d7f", "value": "24:pLw1PKC2mPqLTWi0FthwjT+7fqRvaAgiI2/p9nO95swbXLN+MicaAfLEGkYs64X5:G1P3JPyCiAV7fmngi6swHNnDlWNYE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688946115, "uuid": "a6629027-6ecc-4353-a0fb-73312bcc84f2", "value": 1687, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688946115, "uuid": "c9cb7163-ce40-4340-8daa-b964f4bfc565", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688946115, "uuid": "e736d307-5238-4c14-8106-b885c7641ee7", "value": "explorer_1.ps1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "121ab07e-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload (IcedID)", "timestamp": 1688898391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898391, "uuid": "4252c59c-204b-43b0-8fc1-25a940a0ac62", "comment": "Malware payload (IcedID)", "value": "aaa516ff062b582b61cec398185d1dcf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898391, "uuid": "eaf7108e-a97c-4f95-a67d-60313c21b240", "comment": "Malware payload (IcedID)", "value": "2495778f3a15543896ff57a44e8eff9f232cfc0fc4c09aeb211d964329f2144d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898391, "uuid": "cda18b2b-24ea-45fa-855c-ff02349d483c", "comment": "Malware payload (IcedID)", "value": "c6521033a058aa34c8e330317af377639d7943a3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898391, "uuid": "b0968c47-3f4c-4a62-ac97-ab396b5fc595", "comment": "Malware payload (IcedID)", "value": "43ee45873986033ed155819d82fadd8f3eca81ed82faf971568c9a450e0bd4f1d7be65040af5ef8672f2caf319085d90", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898391, "uuid": "3dcc3e73-cbeb-44bc-a8a0-a745f5df81d2", "value": "T1CDF15B870C00A4B6E797807EC26F393FF9FB1A1E16F67D43ED4064CA1A102B8F069596", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898391, "uuid": "ae3b3133-877d-4742-b9e6-18df8d5bc191", "value": "ad8500a97208d71b9e86b82a28bbfc97", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898391, "uuid": "ccffa0a9-9cef-4a62-abfc-cce3b077b3e8", "value": "192:/+6mG4Dwj688b6bUh9H4CbXpGaKRoCa8prn:/+s4bhh9HxpLeoCa8B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898391, "uuid": "4b192f2a-4195-4919-b243-08064a8b983a", "value": 8192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898391, "uuid": "7b8ae540-30b5-4dbf-9ad4-e9337dbd9327", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898391, "uuid": "29868fb2-8db4-4e36-9b48-eaedc308088c", "value": "aaa516ff062b582b61cec398185d1dcf.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af052959-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884051, "uuid": "3080da8d-5096-46d2-9f66-a5dbd92ade55", "comment": "Malware payload", "value": "65b146e689d541566d0d3c428a4b5591", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884051, "uuid": "2dd5fd36-74dc-401e-b547-accec9b57076", "comment": "Malware payload", "value": "251290028dd0ad3dd5ce9bef81db6dffcafb4e56eb5a8810c6448fbd517c3bb7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884051, "uuid": "0c42c66d-4277-485f-86ea-185e02a0ce10", "comment": "Malware payload", "value": "173f6681054be21daace8e61f50e8927732eda6a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884051, "uuid": "010dd625-551e-477a-a727-a3bf80af5626", "comment": "Malware payload", "value": "9a6a035f07fa5a9018e795683ea020f7930696dec3cea1dedec86f75995bd49a3ddb632b08b3bc2de97cb8866e2b25cb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884051, "uuid": "1abd0687-8744-42bb-8502-98f48c4b830e", "value": "T1FDD35C22A2A280B6EC6732B00C6F1BB5FA787592222171F71FFCCD488D556939D37391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884051, "uuid": "e5490cd7-f559-431d-9912-26fec367db36", "value": "1536:FA/1VKc/F2PTsKYpzrLkyZEiZSZnh6zT0BSa8KNc7T2vhhqLJz6ecQuWvtmgMbFX:FAb/uI3ZHsSkYKeHTAg0FuxS9tj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884051, "uuid": "5d70fc13-ec36-48d0-8a0c-d190c93bb0ed", "value": 136704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884051, "uuid": "e143856a-c678-4aaf-a9bc-5b9a4a7bd856", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884051, "uuid": "9f663370-272a-4082-a774-8890542cd469", "value": "SecuriteInfo.com.Variant.Zbot.4.26546.23504", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1713bc32-1e5a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688908277, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908277, "uuid": "51741397-7eae-4df9-af28-57426943a71d", "comment": "Malware payload", "value": "d71c2a21f80533fbdefb092982bdf0ff", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908277, "uuid": "c23b88ee-c493-4c58-b18a-f43c77904090", "comment": "Malware payload", "value": "26c292393f98afb47d82d4fed01773c8a22852ec75c994d42f4d05168985249e", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908277, "uuid": "704ed264-5f5e-4a7c-bb51-42dfb3566593", "comment": "Malware payload", "value": "f82b702ff772c471a70b49ea36d3c253a216f49c", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908277, "uuid": "3c61070e-6b31-4443-993e-b6861c56cca0", "comment": "Malware payload", "value": "7f5172cdf91c3df515b21417dda796ac895b409248bcbee9424031afac42ee8973e374cc2e4581b764bf564eff1a3b6e", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908277, "uuid": "18791046-78c4-4cda-8c6d-5a883abb0a2a", "value": "T1CC559E3133C6C633C9AE01B01A2ADB5B51A9FDA20B3594CBA3D86D2F9DB44C19635F53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908277, "uuid": "5c523879-34d1-4f89-a295-5f66340c40a8", "value": "24576:L3rx/NnYlVcW7LIJ1MXCOJ05YbswFbE2d7xLZrudqA:L3PnYAqbCOJ05Yb59lzLZrudqA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688908277, "uuid": "4457a7f6-3363-42f2-8c3f-1bb4990ccacd", "value": 1375744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688908277, "uuid": "50151ea1-60df-4885-8716-01f3765f6edb", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908277, "uuid": "23458bd5-1c97-4f6c-aecd-d89b6e480b95", "value": "SFILEMBDOWN_D2zAJuzTqcTMUUGJaN802V5EQErviowPq558\u00aexrlsk.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fe9d9c1-1e54-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905849, "uuid": "f1f5557d-dde0-405d-9836-176ebef82a7d", "comment": "Malware payload", "value": "036ade790c7e769b48f30ef01f425789", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905849, "uuid": "5a60cc0c-618f-42d0-a067-cf453c63a647", "comment": "Malware payload", "value": "26cb0b0f54eab56761961deb3354e1a68035b28237c2ff919535b1fcab520ca4", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905849, "uuid": "da06b464-adc9-4272-a763-93f3882e2a18", "comment": "Malware payload", "value": "3fc7511b04fe2df9a5000d14c8fe4c637dda7164", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905849, "uuid": "95304bc9-4b88-43b8-8b9e-956ffa03cfb0", "comment": "Malware payload", "value": "c6a8ca9820fbda132447387b10749a0e3cf34e6e08d51e44fed51ce9cded1aff9df7d9831becd69d593d5b61df51ca4b", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905849, "uuid": "a58fe792-7549-47bf-854c-2fe54a037b4b", "value": "T18E963392B2D1495ACCA7C8373C6D57A5C59B1E24861AD3D27E1237AA20FBAC40FC7DD0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905849, "uuid": "86606f8c-4b60-4b83-9914-19e2f45a4b8a", "value": "196608:iaFf/I5mrEQiYWRVUCIzL25Fptn8GQa0VRf/xdE2dH/w3Oyng86lGOh4Sko4:fUuWRVUnL25FvnxQpnBTd/jyclGOhBkD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905849, "uuid": "85d4697e-45fc-4733-adf0-c784515ab629", "value": 8914180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905849, "uuid": "70824a5f-95bf-4f58-9016-4f6c71ccdaaf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905849, "uuid": "d293f37c-623c-41f7-b4de-eb1cbb42407a", "value": "26CB0B0F54EAB56761961DEB3354E1A68035B28237C2FF919535B1FCAB520CA4.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4e3cd1f-1e86-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688927547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927547, "uuid": "1c4c6677-f46e-4fec-bfb5-56b211e0e662", "comment": "Malware payload", "value": "46e2d8e297a7928d8eb975122191e8cf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927547, "uuid": "2325bcd1-6588-41b5-9c2b-8a958785134b", "comment": "Malware payload", "value": "26d04621cb1cb9ff63aa549320baae3a4b5e0e4b74e41724241e14be6d856696", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927547, "uuid": "0acf7c5a-da23-48c7-9c08-5c544ad0e3d2", "comment": "Malware payload", "value": "b8d0e7cc037a8575f8e02637487da6ddefa4c03e", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927547, "uuid": "44d9d26c-75bc-4094-a92e-75b932bbfc09", "comment": "Malware payload", "value": "43e6e66feadcb0c73018397729fae32eb977eb08f5554f2400e3abaf467cb7515e90ce37d89f13bd4312fdfc7a84eefb", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688927547, "uuid": "064d80e1-5fbf-4d2f-a7f6-846745f23e32", "value": "T15793E9C1AD43BDF6D5C7EBF496EBE2385AF298051B660645FBDD9CB0C61B8883009358", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688927547, "uuid": "67943893-2096-406b-9ba2-76fc222e5b1e", "value": "1536:RO6Kjvt3z2eZofEoLJwEYKRWEsaKmEvvg9WXabkZ1W939/RPqzu:RO6Ut3z2eZofEQwEKlaKmEvI9YAAWp97", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688927547, "uuid": "98fb4db6-1181-408c-a65f-d393a8c71343", "value": 93671, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688927547, "uuid": "bcd7be4d-663e-4f3d-baed-13afde70ca60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688927547, "uuid": "a68e4dab-071d-4c93-88c1-3d73dde4a7c8", "value": "i686-20230709-1832", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "728c3d79-1e10-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688876648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876648, "uuid": "019732c9-54f2-4a2d-9352-128145f7dce8", "comment": "Malware payload", "value": "fff85d8aeb2931db90755d40db3c8df9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876648, "uuid": "189cb75e-a194-4407-9261-60e855cf522d", "comment": "Malware payload", "value": "294afd42005615ebc602daf145abb28a7d4b7862ccab566e45c206ef6b5e394b", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876648, "uuid": "565e0643-f657-47fa-bf08-e167c36a446c", "comment": "Malware payload", "value": "a5dc87515a0b51008c69b7b7e11028031979831a", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876648, "uuid": "6b11a266-9251-4f7f-821c-d25fa6d1b4db", "comment": "Malware payload", "value": "389bb8f7a1f44c3f49165bc9f0cf0281120cee30dadbde39f507a800cdf49e68b40e770d264954b6ebdf6f4b5fc1679d", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876648, "uuid": "06ac7b5b-088f-4668-9157-fcb9e0a0216e", "value": "T162F2F1508B699DF2EBE10D38F5784712301F88BA68D575B74AE8C07D798346582FCE72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876648, "uuid": "66f126c1-7b8d-417c-a95b-cf1850f071a1", "value": "768:KCDdn/nED7n3Mqdl8cTDd+u3JblLR31j3Ue:KChfkn3MA8ID4ablL51j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688876648, "uuid": "7c5b5c15-92c4-4707-ad3f-d159d672ddba", "value": 34608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688876648, "uuid": "8885e8a8-16e8-4d71-955f-f5623ce4d3ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876648, "uuid": "7e9d8801-74b9-4fcd-a508-990c6d4cc69f", "value": "arm5.nn-20230709-0424", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad10b41e-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884048, "uuid": "b5da8477-f84a-4b71-a8e8-f1ce76f02a3d", "comment": "Malware payload", "value": "b55ea0f46ed49affb8e7d3be1a81ba1c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884048, "uuid": "d5369549-dfee-4270-ad07-f7e6a6a67657", "comment": "Malware payload", "value": "2bb0c0743fff781023b1e918c319952df737aab4c21db6ea7c465077da01d1c3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884048, "uuid": "c5adba37-633a-44c2-a049-65142913e8c8", "comment": "Malware payload", "value": "db054afaee1731b3a4f18dd0bbc40b5768df5a06", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884048, "uuid": "dfc32b9c-678d-4993-ace8-4a38dfa53e4e", "comment": "Malware payload", "value": "ca0ec218404ec577d9f2272c46233209d19bee44bff0c934278068799c685a9e2c26745147ee01fde357482677879cfb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884048, "uuid": "b58c5f81-1788-48a3-b993-6f1a41eb2b2e", "value": "T1BBE23AC56989B9DDF5A60E70C062D9BA2608BE159452DB5A35C43BCFFE361C08F72C23", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884048, "uuid": "f45e1c42-6589-4f09-9482-ccae15199df5", "value": "be19e18d6a8b41631d40059031a928bb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884048, "uuid": "98b65c8b-59d0-49d2-8a6f-25e2e56db06c", "value": "768:/HPmlEV1KRlz3Imwcv0Gu1NNcwwvzEU+:/vmlCjqFHwIzEU+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884048, "uuid": "50e84737-902c-4adb-af53-3074d9ff5831", "value": 33280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884048, "uuid": "be6fcf0c-0742-4067-b5e6-25688864f8b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884048, "uuid": "f64743a1-71dd-496b-9bef-30430881ccec", "value": "SecuriteInfo.com.Heur.Conjar.1.9232.9485", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e1f339b-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Stealc)", "timestamp": 1688883915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883915, "uuid": "d2058df5-cdf3-45eb-8078-ed3aebc04cf9", "comment": "Malware payload (Stealc)", "value": "491aff0cdfce2f59ec2b6eb59f8ed0f5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883915, "uuid": "27cddb47-86a3-4bf7-a76b-d1967fe2eceb", "comment": "Malware payload (Stealc)", "value": "2c1345b32de4f6f1c2f60fd25cde9e0817830a0d3eb626dcc82504b7b73566d2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883915, "uuid": "85346c44-cdf1-47c9-9f38-fb75960aa2cf", "comment": "Malware payload (Stealc)", "value": "c39f731b3281311512b62ff8c16b7c29d374a02d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883915, "uuid": "9353b273-6703-460e-989b-f865c48d3590", "comment": "Malware payload (Stealc)", "value": "e8755c2442499c5b10fae9b693ddcfa7b43660bdb4540820e0175d680e84411e162c319db65175c90ea57da1b88509e8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883915, "uuid": "bcf655a3-ee60-404e-aded-90b2b8d22bc4", "value": "T1D7349E1272E0ACB1E7665B314D2AC6E43B5EF95D8F1427FB23186E3F18701E18672726", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883915, "uuid": "1b11ee20-1343-45d1-a30b-e54eb88fa66e", "value": "9362ebe1cf8ac947f5a41c6f26c4c3c4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883915, "uuid": "d50ca812-95e2-43af-a804-ce84e1506329", "value": "3072:y24IzFXRRDlaa+dDb9ZLh9cFJj8rl3AiaWHpUnwrmsjTi+/4:gEXRRpVw0F08WH+MjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688883915, "uuid": "cf99809d-d3cf-4293-a989-e6c0be96a488", "value": 238080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688883915, "uuid": "f435216b-cf6e-4021-b7ec-a464a6de376d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883915, "uuid": "1f655ae9-3d8b-426d-9cdc-98aea24b84b9", "value": "491aff0cdfce2f59ec2b6eb59f8ed0f5.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77ea92db-1e20-11ee-b3cf-42010a9c0076", "comment": "Malware payload (SnakeKeylogger)", "timestamp": 1688883529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883529, "uuid": "d2a4d289-f73d-4b97-a834-44df967839a8", "comment": "Malware payload (SnakeKeylogger)", "value": "49129798708280181c06bfbad2588dc4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883529, "uuid": "f67393f5-3f8e-480d-b2fa-5a34465a4338", "comment": "Malware payload (SnakeKeylogger)", "value": "2cb7c9dc87cd618a4a307a8f7a054fc0acbb375e0dc2b3d041e5f5b9f138b601", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883529, "uuid": "3abdeebe-f171-4cbd-b4cf-c657c2408cbd", "comment": "Malware payload (SnakeKeylogger)", "value": "616afee4d532afe61d2b17734070c991b748d3e1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883529, "uuid": "0f20f31c-7078-4028-b088-79f6d7e3b50d", "comment": "Malware payload (SnakeKeylogger)", "value": "1612a599d4ca7b99c17bf0562dd099372686d6e4b0d63b1e7a8fc59026a5a71197157c76f3b90c7ceaff9a5d07499264", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883529, "uuid": "ad6fcdd0-bd8e-4038-838b-1ddb5ad60b84", "value": "T18D052AB4A4B4A467D876D5F1AE6ED4303092AD5D3CA04D1F15DABB1A26B730230CFE1E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883529, "uuid": "3b5f0a2c-73d1-49de-8406-43777cd213ea", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883529, "uuid": "71d2ed24-fd95-41f0-8985-97c383da0d2f", "value": "12288:paTVhXmdHpTWByppgEWLJ0cd5qWXPO6s/bT:UpOpTWBy8J0cDqWATT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688883529, "uuid": "276f8785-0be8-499d-94d2-950a481a2b02", "value": 859648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688883529, "uuid": "6e561786-9c44-49ef-863e-ea510ff2e4ad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883529, "uuid": "075fb368-424e-4def-bca0-7859fc6fc760", "value": "49129798708280181c06bfbad2588dc4.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7368c9df-1e10-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688876649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876649, "uuid": "7e933129-a158-4e9a-858b-0636de1c4fd1", "comment": "Malware payload (Mirai)", "value": "e0f1c9a61f896da1814f7df7e55e60ab", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876649, "uuid": "094d5bf0-e71e-4908-8072-2dfa3a645b3a", "comment": "Malware payload (Mirai)", "value": "2cbcc61e749fb1c330d9916839c8ea72269384d5186330a0571157bcf867e89f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876649, "uuid": "d34503f2-f49e-4190-aaf2-778acedfc996", "comment": "Malware payload (Mirai)", "value": "7e8072f111199d6d5641a2018cfa782d620c51a5", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876649, "uuid": "5f80cdf3-7ea7-4969-b70f-3bdd1956be6a", "comment": "Malware payload (Mirai)", "value": "3ab811a38fbb90b3a0c3fd20a164dd26faaa48f97eac993a550d5ee038ee0d540705ebf8c76b5a70bb2a327a39d322ed", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876649, "uuid": "20ea9b82-69bb-4264-9c6b-3423c471e635", "value": "T1475302F0368087A1D5F28A7EB852C7529354E1E8C87D1A67021D62EFF8E3E993D6D114", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876649, "uuid": "d5971f11-31d3-43b9-af01-3a098e81a2b2", "value": "1536:cz+Ze+wBRo29iDjTplsKB1BCqypJsMjBx:cz+J729splsUgqY9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688876649, "uuid": "a7012dee-51b7-4b2a-8309-e41631713fe2", "value": 61840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688876649, "uuid": "0fceb6e8-fffa-4d57-8135-6fb24e42c7cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876649, "uuid": "aafd2a67-1545-4206-b974-f77e1cdd14ca", "value": "arm7.nn-20230709-0424", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "037ecdc0-1e3f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896648, "uuid": "e6864c7a-3511-477d-89b4-5047cb1ca790", "comment": "Malware payload (Mirai)", "value": "6b78f5b48c677e2f8d6a340d1bedfc59", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896648, "uuid": "8ce4e6e1-6c32-424d-853b-9797163a763e", "comment": "Malware payload (Mirai)", "value": "2ce6ddb22ae4b02831ce0785737f226dfe155fdeed2a4141b0e340ad439b4ead", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896648, "uuid": "0fb283d6-184b-40b0-8d35-571a4dfb1951", "comment": "Malware payload (Mirai)", "value": "3ea6ec9d8d7a2a3e2d2b5c48bddbcbc397eff0e3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896648, "uuid": "795d5a04-6cf7-42c5-b2af-5abd8111d3da", "comment": "Malware payload (Mirai)", "value": "08d7840dd5600d5a291a906aa492af42b27293d19fffd89e1467c9584663fb35f85c8b535405c04acd6e8246256eaa1a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896648, "uuid": "e3d92508-c803-451c-838e-6cd452975cef", "value": "T118A39E36C099E9E4C5604238F999AD3D9F12B08956533EFBE7C585A614C7AE8F008FF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896648, "uuid": "61431447-e3a8-4c08-a2c4-49f7be017ba1", "value": "1536:VeZ/ZRARVfaVtwt/bu/kr7MVa3DQsmeJqp3I2nfs3P+S2ivpCaMWSnnN2O:QN0fotF8r7MV6JqpNf+WS2ivpMTn4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896648, "uuid": "7cd0e9e1-644a-4adc-adbc-4d0b4aa8f38c", "value": 100888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896648, "uuid": "67f35672-2847-4aa0-bcc8-3ec40ab8032d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896648, "uuid": "f7dec87f-b71e-4a67-8cf0-d1849b1a5d4b", "value": "6b78f5b48c677e2f8d6a340d1bedfc59", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c523cfe-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload (ArkeiStealer)", "timestamp": 1688898381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898381, "uuid": "2ebd754f-227f-40d2-9eae-e75921ede0c3", "comment": "Malware payload (ArkeiStealer)", "value": "b9ed4d14cadd11886b0f04e43266ca4d", "object_relation": "md5", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898381, "uuid": "55775b9c-7af2-4181-9ba7-a5c5df1c6157", "comment": "Malware payload (ArkeiStealer)", "value": "2d95120a5cfba220550b69f8ef2ebd48e5f8681671204067715674219d4cdcc7", "object_relation": "sha256", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898381, "uuid": "f4e2897f-077e-482b-8c22-b2d247ba89e9", "comment": "Malware payload (ArkeiStealer)", "value": "dba62307bb8cc9e5a285d3af1d2cf9836c3e85c3", "object_relation": "sha1", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898381, "uuid": "54ab45a9-3ef3-4a53-a9d2-f3f9a461991e", "comment": "Malware payload (ArkeiStealer)", "value": "264768f4f0c2a92318927933b8af9c20c6e8c4355ef45686916a33c612488e50bec028db5c5282db5c64daf80a97f727", "object_relation": "sha3-384", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898381, "uuid": "58639193-cb26-4ed6-a4d2-0fd5cbe0bd2f", "value": "T135D3123714AB6205C0776637160A203570787B1ED4D3DDC83AE8477AE3D23A6DB0AB6B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898381, "uuid": "4682c53b-f0eb-4771-8fa0-fb99a21fab8d", "value": "c37e1c8e196b916959455d16e6141dee", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898381, "uuid": "0b66ec79-f993-400f-9a44-b5ecd844fecb", "value": "3072:5xTQPLm6fH6PP5McwLcfnzQ8b7e8s4Khb/Be+4TFkeCout:DTQv6PRM4Pp7eZ4ub/BGpkLoS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898381, "uuid": "64ebedaf-abb4-43a9-9d48-410587784d8e", "value": 131072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898381, "uuid": "3ccbbe71-1818-4b94-8ea3-6b2a6ac878a0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898381, "uuid": "6a717f2f-e040-4f5d-8ebe-c1f888c00633", "value": "b9ed4d14cadd11886b0f04e43266ca4d.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abfed8bd-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884046, "uuid": "1cafed5a-6836-4073-a5e8-8054048c5d13", "comment": "Malware payload", "value": "688f34ce5f59bab5a0126e3742a8c8d8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884046, "uuid": "378ffb5a-a211-4fe0-a880-576dd1f8470e", "comment": "Malware payload", "value": "2e98c7ee4adbfb911142980a5ff1f46b944d7ca0c975c01b01e9eb14dcfdf5d5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884046, "uuid": "f7aa6ddb-afcf-43d7-9881-a70a735642b3", "comment": "Malware payload", "value": "f620d289adf69afadf3d679ba2178d953fe3c7ce", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884046, "uuid": "ea4b8324-d286-440e-9fdf-1405670565ae", "comment": "Malware payload", "value": "3a548c07d42adadf26ad7df05f921ec8db49c3396ea130530ba0b4d9eab1b4274380ce09152c7f91c28c724f75e146f8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884046, "uuid": "3f1cd049-19d9-4190-91f0-3b19caa22ef3", "value": "T11E14129BDAE1821CE08120F2CBB505027564EEFD071DC62BEA9143272E92E95D1DD6F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884046, "uuid": "7926789f-1143-496d-ab95-3e5846f61209", "value": "cccd8ee47c8800024c2fef5b2da820a7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884046, "uuid": "88e68941-90f9-4eba-802f-ebc3c7c7daba", "value": "3072:j9aLX6ApH96HM0XU+aDe5UEjmIlmijI7rUGimM6GTm94GnrRhSLj0I7NB0LZxjFw:haj6Aln+aC1meyUGimM3TtGLSv04+NzM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884046, "uuid": "ea7539a1-98de-47cf-bc50-d75cdff7542c", "value": 194560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884046, "uuid": "494cfe40-b931-4621-843e-cbc26143150f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884046, "uuid": "cc24e995-df4b-4bf1-a7fa-3b2c24d12512", "value": "SecuriteInfo.com.Trojan.Heur.lu0asi1IG0bi.4931.2288", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec7b1050-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898757, "uuid": "f5d4e946-e5c1-4326-831f-1e32bc79c1cb", "comment": "Malware payload", "value": "a05809a2cd11c14fa4172d6afa2df6b2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898757, "uuid": "80748fb1-4dc5-47e8-b1c4-2d66b8ab2f32", "comment": "Malware payload", "value": "2f455e6245fa4762f8f8ad94ac2fbabb821046ba6033de070a454c60e00cfc28", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898757, "uuid": "694f2219-eba6-4ede-8fbb-c765b8a4ac41", "comment": "Malware payload", "value": "f14fdd15eb2265968b53aabbee59b1cdb5402c8a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898757, "uuid": "a137191e-01be-48e0-81ff-e6ea588c45f4", "comment": "Malware payload", "value": "560182c247b549a940cc8afecccd52740776d92dae94a8d20f0eac0ce6fac457ecb45d064fbb597ed6f2167ab879e86a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898757, "uuid": "0f4277f6-ebc4-4f22-bf86-460d15bfef33", "value": "T17984DA55F16BB9F8EA74E1F0BC6867FB89780C3121321538314EB9360A75EDF90C1A96", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898757, "uuid": "db7e06f0-09ff-4a69-95d3-c343fc7a75fb", "value": "c4e415dc20169c8bc984bc9acaf759d7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898757, "uuid": "0e1a9bb3-e4c9-4d00-9379-deca0037280a", "value": "1536:UFruvDlFLwKtd1ENU7SCKP8WKKKvlaCL7gjZu40CRrHlxyC7/b5mf+Rix:UiTZnDEjH5mWRix", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898757, "uuid": "dd5dcc71-9fc0-41c7-8bc8-c3f90ef1d001", "value": 388608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898757, "uuid": "e4064566-9006-4f12-ba66-1bf35a18e851", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898757, "uuid": "51568552-06d5-4478-a7a2-1beca25d3c13", "value": "SecuriteInfo.com.Trojan.Win32.Genome.9505.12814", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7446aa05-1e10-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688876651, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876651, "uuid": "75e56e35-88e8-4f03-ba73-90ff86073298", "comment": "Malware payload (Mirai)", "value": "381fd1fed65a7f1f059bc59456af756c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876651, "uuid": "7aea9f89-43a8-4d7e-b8f1-040621fb2f23", "comment": "Malware payload (Mirai)", "value": "2fb014629e664e7aee970bd975e93c6d6de4bb7078d7c63d6efb92d10876f5ca", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876651, "uuid": "38422833-1572-4a67-8752-7071fca428b8", "comment": "Malware payload (Mirai)", "value": "3a8b688996c2105d76f8b874d10801f80db8322c", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876651, "uuid": "7ab4055c-d345-451c-908a-1ef9c9b72d28", "comment": "Malware payload (Mirai)", "value": "3f92e3ff2ddd33f0ad1fe95bdc086e4ddd9e6055b5a8aede804415de87c572c97c822018681f8fc7152c44d601293736", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876651, "uuid": "4b202daf-a24e-4088-b88f-1f35ea78664e", "value": "T1DB03E1965891A071CE310C7C69ED2643F30C3F7AD4F97A273B44E2B93EA0896677C146", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876651, "uuid": "0ccc89fe-b79b-4055-b8aa-411906ea7343", "value": "768:R+5GMNQZwjw7moHTGYBg0ER9eNbUiSKrZ9Ly6QeVgK+EkcP4qxTd6CjCq3UIos:R+YMGh7morBZERcVUifru6y5Ex4qhVJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688876651, "uuid": "cd3edb70-94f9-47f7-bd08-3241f71ea26a", "value": 39260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688876651, "uuid": "e41f6197-782e-4cda-b49d-f9683caa97e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876651, "uuid": "b97b39f3-01c9-4b36-856b-a39bbe58c080", "value": "arm6.nn-20230709-0424", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b00ddb02-1e62-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688911970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688911970, "uuid": "01cd77a4-ddc3-484b-a540-f74b8b9443e1", "comment": "Malware payload", "value": "32cf2b28b463cce21c5baa9feca05bfa", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688911970, "uuid": "8a1ba805-2941-499d-ab5d-ea3f7ac10b8b", "comment": "Malware payload", "value": "301e3250de13eee3b6820b072d611534706ae12dc7f9567e3678da841a885472", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688911970, "uuid": "6365eb0b-5ab6-496d-b9e7-42e0801ad811", "comment": "Malware payload", "value": "212498d6e9900b9b43789c334cd45eb8e75d52df", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688911970, "uuid": "31f167ab-137f-4261-a67e-5ca0fa128303", "comment": "Malware payload", "value": "9c47e16f75ad2c11a16e3af97fb40a4b81bf07985f8e9e57a8dd26323155696f7dc73b786822f2641c804b9fab4ad2cf", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688911970, "uuid": "0dddb2d7-b468-459b-90c2-195728db484b", "value": "T1CB163301FF5AF802C9BD1731248690D165277E59AF3A962BF02A723C35B76D10F81A7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688911970, "uuid": "08570e63-8cd3-414d-88b8-5f4c3435e9ba", "value": "98304:4mluIsF0MgGrOY0QEj5nsNGrToSb8KU56pnfh:4+uJF0MgOOYaONGrTtTLRfh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688911970, "uuid": "fc153219-89bb-4b54-b772-aab81f42366f", "value": 4348373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688911970, "uuid": "ed4a4d3e-430a-4882-8f5e-227bea951f6c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688911970, "uuid": "1a25cda9-7025-497d-926b-67dbcaac5b2b", "value": "Play_Store.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ba3f3da-1e0a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688873898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873898, "uuid": "c60dbe23-afb5-45a0-a1af-0839dfa285bd", "comment": "Malware payload (Mirai)", "value": "cd9387261034bacc56cf5751bd689a5b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873898, "uuid": "f5a60f12-e756-41dc-8805-3044a3754651", "comment": "Malware payload (Mirai)", "value": "30ea6ad11ee82a174a06676fce02be1d3df2506177b20bbfd07f43ff6f683cfc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873898, "uuid": "d7713665-b9a6-49de-b64b-d02a587eeb09", "comment": "Malware payload (Mirai)", "value": "482decbc913005229c4a508edd6d09880b8e5066", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873898, "uuid": "dcf46152-27d9-41f3-8e11-fad8e8f5882c", "comment": "Malware payload (Mirai)", "value": "e0a7ff4c93c4c3e67fc3d2f05a63eb2d86f4c138d48354b6e34aa63a7e63e2d926c2144e6ff62d67074397a01c3ac91a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873898, "uuid": "2e8bbe2e-e857-45b2-9871-a97536a02e35", "value": "T1E7532AC4E1C3E9F5EC140978317AAB629EB7E13B7174ED9BD7D95523A802B02E10629C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873898, "uuid": "df917687-2ba6-439d-b4b3-4077cff63f20", "value": "1536:7FBnEPucoT6N6sl65kMk5GqhTXtSWJl/Kski/n6Dqk42:HnEPHoTc6hnIbTXtSWn/Tkif6GN2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688873898, "uuid": "9e66e9c4-64a3-45af-9ffb-957329675901", "value": 66136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688873898, "uuid": "965bb7e1-8de8-4921-8942-9369dc42bd62", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873898, "uuid": "a8ade0e5-dd4e-47d2-acd0-8186c2bfce89", "value": "cd9387261034bacc56cf5751bd689a5b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3fffbe1-1e86-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688927546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927546, "uuid": "dd9a3073-c886-4256-be90-0de6ba23b2ae", "comment": "Malware payload", "value": "7b2da1988cf599b05822bf51cecafca5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927546, "uuid": "43b50be6-6f59-417b-83a6-c10350c2b7b1", "comment": "Malware payload", "value": "31886b24068311d42bdf5370445c400ac867e96f7c43b7a18552112a5caebd07", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927546, "uuid": "83f7450d-eef2-4ad8-8282-27eb0f7b0f12", "comment": "Malware payload", "value": "1e421fce037288b0ddac67f1d4c254edc204f080", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927546, "uuid": "59c35747-a63d-4f10-bc76-b3ad3dff46d8", "comment": "Malware payload", "value": "bea096018b3e3a67f555e0f40bfa456a0db78697a977de758acd7623946c23de55936e40881086f5eb045198420ad74a", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688927546, "uuid": "f70666c0-3906-4300-9d4a-87f618c9ff63", "value": "T154A3E7C2AD427E33C2C2EBF6FBDBD14837F25614979B3341A9996EB00A1B9CC1D19254", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688927546, "uuid": "637e119f-081f-4d67-a7d5-3a24540fadf4", "value": "3072:lXFzax6bEChwH4Ipx8ZC7pG72AehfNI4rVq4:HbEChwH4IpCZC7pG72AehfNVrVq4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688927546, "uuid": "246c3d35-c4cc-42ec-999c-11289074f366", "value": 105476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688927546, "uuid": "9cde77fd-ca84-44dc-92ae-512ba15e0660", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688927546, "uuid": "59b0e3ad-7d25-4afa-8198-38d53f98dc28", "value": "armv5l-20230709-1832", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c73150a-1e92-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688932499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932499, "uuid": "0ab33c21-1f8f-40d4-989f-09466b3880eb", "comment": "Malware payload (Mirai)", "value": "5779b00330ad6f1f611be69f586cd614", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932499, "uuid": "4a5d9971-5ed1-43a9-915e-5102e3f45e60", "comment": "Malware payload (Mirai)", "value": "320ce456e6e82cee5060ca8f833af59a26d50b7d79c19440a64f0b9a1e2ab85e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932499, "uuid": "fbdb3cd8-b603-40f8-9d97-ef4f1a39b28e", "comment": "Malware payload (Mirai)", "value": "2f28b8b19d257b7aa6b1b764bca2ecf1004edd67", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932499, "uuid": "cd6a4345-2ee6-4781-a90c-724c3650c82c", "comment": "Malware payload (Mirai)", "value": "aca6bf8a7c5152931035dcb537dab54f2bd842b5fc576e66fd98cd7e6e3bf00d9bc86a1f004116524eeeb2abc50328b6", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932499, "uuid": "ed6d9d12-1fae-413e-9bb1-21816185f14b", "value": "T16703F2959313F596D5104E37853A0A83B36F2FFE91E638594D4C0DE639CB85B837C862", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932499, "uuid": "10134c85-9209-4195-a319-e19d9d3c9d41", "value": "768:RVb2BpyriZ0Vl/UvV6+gYY211ElZLys9RBt7FCSf0ZMfY0CaBfkkJXmZq3UIou:RVbupyeZ0Vl4l5U3zrCSf0ZMlCaBTW2f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688932499, "uuid": "5738d9c9-ac14-42e6-90f3-f91b10c9950f", "value": 39260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688932499, "uuid": "39195c89-2365-4a88-86e3-615618975646", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932499, "uuid": "65b8a075-140b-4790-a709-e894d1705d19", "value": "arm6.nn-20230709-1954", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cbcf345-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907965, "uuid": "2b845475-43a5-4f45-b477-a1058547af7d", "comment": "Malware payload (Mirai)", "value": "e6e4e538e8f9cc041a674c61a9867155", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907965, "uuid": "8251cec2-a773-4b70-a6a5-a4d4b010770f", "comment": "Malware payload (Mirai)", "value": "32496c6a85e79253f1ba7de380adcb1b8e16ac9772824090302082dbaae0d70a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907965, "uuid": "02cec1fe-3bab-47e9-9e46-63517c5d077d", "comment": "Malware payload (Mirai)", "value": "e59e1031db47b5912b495e880f8159a6038d36bc", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907965, "uuid": "9bf9b5d7-013c-4fb5-8f17-5c9e5ad4573d", "comment": "Malware payload (Mirai)", "value": "95f909a89fb6efeb499c1a23ef9f0afa94320099ab534dd446e81b4b0f71416b255364c351444cb3f663b3e2d6adab33", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907965, "uuid": "f847eabb-717a-4edf-b3b2-9bd8ba08e897", "value": "T1BAE32C56E7414B13C4D61776B6EF42453333ABA493DB73069928AFF43F8279A0E23A05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907965, "uuid": "004a4c0f-8354-4bc9-b81e-7d2a70dcdd58", "value": "3072:enKZCY3eDqUZcdaLiEdRn9bfTZiYkur/E658KM/9wk/g+B:enOCYKjqdaLiEdR9xjbE655M/9Lgs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907965, "uuid": "c7989b71-92d5-4448-ae97-9a75515385fa", "value": 146481, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907965, "uuid": "504bd6c9-c737-4b09-974b-98384edf7dae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907965, "uuid": "80967a1c-6099-439c-9430-a7e387c9a396", "value": "e6e4e538e8f9cc041a674c61a9867155", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e267b305-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898740, "uuid": "900d5025-b80b-4455-99a1-4c55de56ed50", "comment": "Malware payload", "value": "307eb526ebe26354350d6d8e91a68440", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898740, "uuid": "39a558c7-86e0-47d7-9089-3914903b11e4", "comment": "Malware payload", "value": "32c95a385d1a91e91274396b3474a5dd35c8ef0b5c458570cc8b5651687d2297", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898740, "uuid": "7aaef454-3643-47da-adb3-fbb773a805b7", "comment": "Malware payload", "value": "a82cb77eb29ba508f40b31632a6e24062b92da96", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898740, "uuid": "85f0634c-de4a-4e27-b6a3-2c5946b31d42", "comment": "Malware payload", "value": "68d47d60061a9b127e58c61a51fb1e2838e32697e4a3d6d2b6aeaa379119aededde1eba3f0b9bf487b6b87d514b451aa", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898740, "uuid": "8c19e77f-13c2-4f5d-87bc-49b5eb99c4c6", "value": "T1AB652391EB631342CA9DCB78686D235BEC24F434D23E4713816FAB19C9422A3CE7755E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898740, "uuid": "54142143-3cb1-4e25-b7ff-b7e0e71d20d0", "value": "ccae7705d3bafed6b8f5ee79b27d03ec", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898740, "uuid": "c9c6e5cc-4a21-4292-893d-9fb6255b1e10", "value": "24576:2X6f/cB8kDIE/wU+YrOoGCQDaAyKnA1artWZ2MnT+bNjTIL:2Ku8ksUDrOoGmsA8IvT+b1G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898740, "uuid": "2b504868-3c7d-499c-b3bb-61ffac84c20b", "value": 1482752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898740, "uuid": "613c72ca-7ce7-43fc-91cb-e5919e20d941", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898740, "uuid": "b1020974-d2df-479a-a494-bb89fbcc5386", "value": "SecuriteInfo.com.BScope.Trojan.Packed.12563.15748", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bfbc7c6-1e24-11ee-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1688885200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688885200, "uuid": "925776a6-0516-4714-bcef-06e74fe00e51", "comment": "Malware payload (AgentTesla)", "value": "82f1824f39b1df02b1254991df0b0655", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688885200, "uuid": "ef2e3de4-e7ad-4ec8-b0e5-536d35cf6098", "comment": "Malware payload (AgentTesla)", "value": "33cd7c6c57db13764de8a22fd1bc0a0e611509b47e376608e6457bbcb75f389b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688885200, "uuid": "80c1d451-b1dc-4fa2-9783-88dd5c45211c", "comment": "Malware payload (AgentTesla)", "value": "0be07bc724dac0f5aac40230850ef37bb47f8c49", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688885200, "uuid": "9bbab37b-0e41-4392-b8c8-c82155ff88f3", "comment": "Malware payload (AgentTesla)", "value": "e3182f6ef09f65d6d10385b198365c20b2eab8ae61a268242a9adaa00d935e13a59278d58b139c459f9a601182cc3a7e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688885200, "uuid": "d7e9ddb2-20e1-4383-a6b6-5b1e2a2117ac", "value": "T10B9412063891D86BC6F277F094745A67A9727CB10128818B5BB5BF18B833153DC8F6BE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688885200, "uuid": "1ee0eb73-4b01-4a62-bfb6-11d7509fcdd5", "value": "61259b55b8912888e90f516ca08dc514", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688885200, "uuid": "6ce9b5c3-a65a-4158-977c-1698154ad5fd", "value": "6144:gYa6ZEVDPsTGjGXuriXMvHCKzgA2Srji/CoqRMEykVET0AK4JH2ic1gYY7bHxNK5:gY7eRS/cvioLNR36TJ9H2f1gYqRAElne", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688885200, "uuid": "555b260a-d513-4dc1-862f-9434f9ee793f", "value": 421702, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688885200, "uuid": "260fff13-1be7-4fbd-964f-3cf91293c4f5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688885200, "uuid": "49afe6b2-b2c4-4320-a6aa-9efd69974325", "value": "82f1824f39b1df02b1254991df0b0655", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f4f8810-1e0a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688873905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873905, "uuid": "479a499e-dceb-432c-9449-6b43e825cfd5", "comment": "Malware payload (Mirai)", "value": "0c90bd9653fd0bd84b3b008900373cc4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873905, "uuid": "ee33651d-841f-4dda-b18a-25d299c8ad78", "comment": "Malware payload (Mirai)", "value": "342dd4403b22d287b9c33030614c628e67558dc16d55c6782439d1b6a9bdcbf2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873905, "uuid": "45aec045-ec6f-418f-8ff7-dddfd2a97fa8", "comment": "Malware payload (Mirai)", "value": "f9ea7e605ab63cec9c66d600495a4f6c53c6610d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873905, "uuid": "0a6cfd46-9ee3-476d-ad8d-f86019f6be18", "comment": "Malware payload (Mirai)", "value": "6d8300fae04d7ab8e4277163e73cb9889f75e94c7f4b445665a7e57fddf8a716e2a5dffcacb694979c6ab6d8dc5bdc33", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873905, "uuid": "d4ad8e74-d23f-4900-be48-f85ab935d8d2", "value": "T19993A40ABF610FF7E89FDC3749EA2B05249D542761997B79B930D908F21A24F19E3870", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873905, "uuid": "0d4aa281-3329-41e3-9cd9-1b8107d9f33a", "value": "1536:55PIwNuowUbcMcZRw0fF6QP0aEB8yLFLgt1xanZXq:bPlNuATu+giZX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688873905, "uuid": "13d15862-1ffc-40ad-9722-fb9ff399f3d6", "value": 92004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688873905, "uuid": "6bcc9ad4-f627-4a70-a5a7-29bd07339a84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873905, "uuid": "7ebce5ad-7690-4c33-890c-2746b2ba5aa8", "value": "0c90bd9653fd0bd84b3b008900373cc4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b657059-1e8e-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688930833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688930833, "uuid": "32b39c96-b079-4b46-a411-855b40b0d216", "comment": "Malware payload", "value": "9edb23e5de91bef0393642690a368048", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688930833, "uuid": "22dac166-ea86-4f15-9e46-112d40de4c19", "comment": "Malware payload", "value": "3505d57297d15e2f857515e4b617f8209bc49c42ca3f785dd5bf3dd802ba440b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688930833, "uuid": "580ac1b5-6f54-4ceb-9cfd-da03fe029021", "comment": "Malware payload", "value": "deeee70aefe1e1e19799dc793b3b22b9126afba4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688930833, "uuid": "8d58ace8-7879-4e03-baa3-f5c78c5a9f78", "comment": "Malware payload", "value": "18fea7208c99ace2a6aacfc602a06f0dbbaf11f5cb158a0220e74e6d78cddb009580f0f8a3753d9c751578d46d98b0df", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688930833, "uuid": "e9df5f99-9390-4efb-8e9c-f519ff1a8ee6", "value": "T177C2D0705B8E2C92CE300571D6B8DE437A674F9DF0FF35612286CB65A50220626EC9CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688930833, "uuid": "78a9fd79-fb23-49f3-bac0-fd19da387f83", "value": "384:Elt/koxisa34beDtZw4vLlHydU9jB2aYEsMGsvuoybC+BBpiiYJDhymdGUop5hd:EHsoTAZHBnYIEC+Jnus3Uozv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688930833, "uuid": "084a456b-8afc-46d5-9774-251fe9439f7a", "value": 28176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688930833, "uuid": "b812596f-94e2-49ca-bf50-069d8f9bc146", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688930833, "uuid": "5f956692-c5c2-4f95-907b-20dc9af48564", "value": "SecuriteInfo.com.Heur.20230709192741024095135", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c413b6f8-1e9b-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688936485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936485, "uuid": "79c03bd5-949f-494c-b408-c92c1c593d8b", "comment": "Malware payload (Mirai)", "value": "11842a4db8779b800e9a3a75b192d704", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936485, "uuid": "fa709d62-8536-4223-8511-ae70fdcc3a18", "comment": "Malware payload (Mirai)", "value": "361d5580ac7919ef5a72582ca80d2901c65f787ba86c52b44a3a170a7c1aceb6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936485, "uuid": "bf2b9641-3074-44f4-a4ac-b394b540aa42", "comment": "Malware payload (Mirai)", "value": "8d5820bd4bfe625b782cb0106f45208009537587", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936485, "uuid": "b850f4c8-c906-4bcd-b265-0dec3a4081b9", "comment": "Malware payload (Mirai)", "value": "4a04d2ccd93056e11d62e104e85ab2f106814f6e9f28cdaf90bbe57670fd3bf31049918c16e03358dfea4ddcfd655ca6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936485, "uuid": "60acd009-9b02-47ed-8d48-1ca8427c128d", "value": "T1F3F2E022832BD571CEB5DABBA93182E4195B47F4B5BF70A42394C29D8CC1F07D0FA54A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936485, "uuid": "76dd2061-fc08-41b6-acbe-9ae320a0c144", "value": "768:EYVgAxkU1RHz5poClGL1aMnXha7WBNoWhSxHjaNf9q3UELCQ:EYyAxdRH9zILLBBrodjZLz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688936485, "uuid": "b663df4a-bdf3-4e48-9555-6790b7181320", "value": 34476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688936485, "uuid": "03f2e21d-4a2d-420a-b1fc-119446656449", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936485, "uuid": "a55cb66c-cc36-4256-b438-adff8b159f95", "value": "11842a4db8779b800e9a3a75b192d704", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cfa6911-1e3f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RemcosRAT)", "timestamp": 1688896664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896664, "uuid": "9a8ab950-b669-4020-9620-d34812934bf3", "comment": "Malware payload (RemcosRAT)", "value": "d61c17656e28348150c5d17dcc0106cd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896664, "uuid": "2fde68f7-140e-4d50-bb5b-b06d1ff9b219", "comment": "Malware payload (RemcosRAT)", "value": "369fce162239045403c87f8c83445d9d300fe2d8656899cb079ce4acca77a99a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896664, "uuid": "094f4db6-85b9-41c4-b1ac-eac3527a5a6a", "comment": "Malware payload (RemcosRAT)", "value": "9102fc05e6cb399f547752e53a66075243052a4d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896664, "uuid": "ff6db5d6-421c-407b-aeea-58250e47ad66", "comment": "Malware payload (RemcosRAT)", "value": "612f952767992412a979b5916655e8c8b2d238b981ff3e9eadc53edd70366612baea0e416c96151dfd2c56c09e2416ca", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896664, "uuid": "eb76db97-4c97-41eb-b311-cb23da54b52e", "value": "T1EB863351B260C9E5D8B65139CC80C6F49662BC73C764D68B72A07F9F3F337A6583AA01", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896664, "uuid": "0ebf069a-6495-4b56-b060-c058b22b9c4c", "value": "ba5546933531fafa869b1f86a4e2a959", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896664, "uuid": "9f32631b-1d96-4a50-af32-cf333b466e24", "value": "196608:leY3avuuDfyGR21X5Sp6GemDMPwuW23vYPGshGRx:MY3aJDfDspfaMP5z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896664, "uuid": "2722f4a3-2944-4c26-993d-2444ddea98b4", "value": 7831460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896664, "uuid": "fc10a9bc-c96b-4a61-b2de-9f8bd2a180e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896664, "uuid": "c65c5241-1b9d-432a-a269-b0b45f703cfb", "value": "echo-D3FG-2.DE.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "072b732a-1e3f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896654, "uuid": "db3d3d12-0593-4dd9-b659-0a274acf558c", "comment": "Malware payload (Mirai)", "value": "735e9753c19e47f94262a223f3d6d90e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896654, "uuid": "d70df1bf-27a4-4c14-8196-c15dca0331e0", "comment": "Malware payload (Mirai)", "value": "3aab99d31a9b0d00a302a0ed2671ec65ad791ecd86a7f80b7a5d6273afda55d4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896654, "uuid": "0d3661d4-4c41-4a98-a003-72a4fdf8c8fb", "comment": "Malware payload (Mirai)", "value": "e4788f75621967957a9ce71fb43cd41c0b79dfe4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896654, "uuid": "415588a1-5ce0-475f-89df-7762c3fbe3cf", "comment": "Malware payload (Mirai)", "value": "e9d39d4519133cba77f942a839583b128d32ba39be3e0daa05d062f782852c55b127ea3c1944da603030b9c6966b8324", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896654, "uuid": "b6d4673c-45dd-4203-9ed4-7cd0de50740d", "value": "T16E03E1BE83602A49DFFD09BEF76D026A4DC5F4C13ACB0F7523168E547A0511AB49C4A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896654, "uuid": "447fd910-287a-4d04-a77e-637d2cea882a", "value": "768:n5kkIYwjozyWu6BM4JwjgrHPLy0HgqL4Wu3oN8LzmNBPZwpEb/CEWfT:n5kknwk9umHPLy0HgqEON8L+cpEbKhT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896654, "uuid": "cf6b73a9-7ff3-455e-bbde-d39cd5dd3f4d", "value": 40428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896654, "uuid": "681695ac-6a8c-4f1c-a921-b80a6f761933", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896654, "uuid": "e72f22cd-2e8c-4e29-ada4-5a4983b450e9", "value": "735e9753c19e47f94262a223f3d6d90e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f56e4656-1e34-11ee-b3cf-42010a9c0076", "comment": "Malware payload (DCRat)", "timestamp": 1688892329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688892329, "uuid": "791fe0e5-df26-40d3-9b21-ac912beb173a", "comment": "Malware payload (DCRat)", "value": "1481995659bd374e6162f46b65196a4d", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688892329, "uuid": "fe58b02c-6871-4cf6-8ba9-b37e78e59f2a", "comment": "Malware payload (DCRat)", "value": "3abe5f84237de0ab79edd989d43a4047d0710271c32ce405b50107a0397d41bd", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688892329, "uuid": "38a6053c-b616-4819-91ad-14e27f946c1d", "comment": "Malware payload (DCRat)", "value": "c22e14378618a7452e507c154c67d78a46b0740f", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688892329, "uuid": "e52e8641-cd2a-41dd-9edc-92565c820415", "comment": "Malware payload (DCRat)", "value": "c3be214c4fcbbe25a369c87bb2070919f67a9064ef33fc6b000cf3b595dda4ee0f8dcd7f2abfcaed7fc01fe0623a83e6", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688892329, "uuid": "eb8016eb-550d-4253-bcce-78b29ffac2b9", "value": "T12E658D027F45CA12F01D9633C2FF454847B0A9516AA6E32B7DBA37AD65123A73C0D9CB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688892329, "uuid": "c54e5a37-fcf3-44bd-b9fc-ee7ed21d5e94", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688892329, "uuid": "c20c2403-26b0-4890-aba8-77c8b02e5d11", "value": "24576:CoMR9qZIRzQrHXa/9ChAmL0fIxCWTVw67Q4PqyqN/oH+akQ6:Cz9q1G/CLaUTVwMLPqV2k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688892329, "uuid": "58370c29-48ab-4d3d-8874-580f906acda2", "value": 1527808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688892329, "uuid": "6256b87d-3b67-4862-9385-3ca04d81dafa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688892329, "uuid": "ee225b64-246c-493b-a548-8c622dcdedd3", "value": "1481995659bd374e6162f46b65196a4d.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "555e00ca-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907952, "uuid": "2707e88e-6d7b-499c-bda6-d55ad1f6f4ed", "comment": "Malware payload (Mirai)", "value": "3f29c106c1a85490aa636846b5141366", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907952, "uuid": "2f6bec12-14cb-43de-85df-0a8636ccb094", "comment": "Malware payload (Mirai)", "value": "3b2993efcdeaea5f7daaf1dbe982b1b780b4b63b89284131484865b2c74bbfe4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907952, "uuid": "71cbc2b8-20bb-4330-88b2-6d726998ea3e", "comment": "Malware payload (Mirai)", "value": "5df577effe7c88ff0c1a29d1560877ac6f24add0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907952, "uuid": "246e735b-009c-4201-9935-a272d07c09c3", "comment": "Malware payload (Mirai)", "value": "72325deb895dbb99ad3481d8d22c456ed633fdb09209030dcd49a1c81f1434aade16ffc55680f021f8b73d7e99147e91", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907952, "uuid": "37c10f9d-ab52-455c-9c6e-c11b9a46a10d", "value": "T17A83B71E7E159FBDF7A9833007B78E25A65C33CA27E1D581E25CD2112E6024E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907952, "uuid": "cb063565-d9fa-4743-993c-d45122ba7624", "value": "1536:yTWd5KQyWZdM0DFUvlwW0sd6qHeBQeCp7r1ez:KkhyodM0DFUvlusd6qHeG7r1k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907952, "uuid": "7fe66c90-6bc8-40fb-b86f-0505a543194f", "value": 80916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907952, "uuid": "51fdddb8-b714-4119-9f9f-1af3a79057e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907952, "uuid": "59110052-352a-4b83-bf56-d4313ef977eb", "value": "3f29c106c1a85490aa636846b5141366", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b7ed765-1e2f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Stealc)", "timestamp": 1688889924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688889924, "uuid": "81793db0-7dca-4138-8efe-0959580f09dc", "comment": "Malware payload (Stealc)", "value": "10e82b6ad59c2ab5f97f96e6060bb12e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688889924, "uuid": "76945f83-746b-4e1a-8b52-0dbed1cd7e18", "comment": "Malware payload (Stealc)", "value": "3bd221e945c0da67960f21c8bec0d678ff84f10dcf3b5866ed57a1ced810cbd9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688889924, "uuid": "5f880a2e-2be3-4030-a2d3-fff7f49f22a9", "comment": "Malware payload (Stealc)", "value": "9491bd29357513c63d703ac9d99dcf25251d7cd7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688889924, "uuid": "c472e701-a3c4-40de-ad78-70735b186b99", "comment": "Malware payload (Stealc)", "value": "7c18b45d3b1dd5013ea4c57d03e1fd338d5547c42b1e0cb9ca8b1e2bbac94d1ae0060fc0434bd3000f6746eb1cdb50d9", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688889924, "uuid": "83f3e5ee-aedb-4aec-9500-7e27cd463785", "value": "T12FB5E03FB268753EC5AE0B3245B3926099BBBA61A81B8C1F17F4050DCF664701E3F656", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688889924, "uuid": "7489e23e-cdd9-4798-9016-fa228226b46d", "value": "e569e6f445d32ba23766ad67d1e3787f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688889924, "uuid": "4bea30be-bc27-4ad3-8431-a272cf014d80", "value": "49152:vBuZrEUiWqJZU2zF35Me89k6YQoWH6hBJLJZ2iZ3vxm3c7ldhA:ZkLiWqJZU4F3XEYVbXvm3chA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688889924, "uuid": "a14dcfed-c379-411c-9ec2-b5394b1d1307", "value": 2342807, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688889924, "uuid": "bcb20ade-8f6c-4091-be40-cb18359bd495", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688889924, "uuid": "d2586b8f-8fe0-4a32-994d-b57d90cdb7a0", "value": "10e82b6ad59c2ab5f97f96e6060bb12e.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4055a97-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898743, "uuid": "9ba00205-bce9-4fb9-a427-e902039e4a27", "comment": "Malware payload", "value": "0797255837a29859c1db70feea6762a5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898743, "uuid": "fd7ad552-73cb-40df-911a-94229cfad0d2", "comment": "Malware payload", "value": "3c95bdb3fb371e2cef7e6346617c6d195379cae67b97ce32efa16fdb104b3263", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898743, "uuid": "5df8e417-455f-4700-a0b0-9eabf43241c2", "comment": "Malware payload", "value": "357eca6b2e6af5ad7e6e4929ec21d625dc9ce524", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898743, "uuid": "9fcbbc34-3cd5-48f2-9118-15988866b7c3", "comment": "Malware payload", "value": "a973778e14fffaa26c62c2c47022a496e42ac76a5be38f592323c67400d0afd44794e0893f2cd5775d3af9d10c2a226a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898743, "uuid": "55633be8-d0f4-40ba-9649-1cee12899cdb", "value": "T100E25C61F6A88832EA7B433609329FD4910BBC707D158F0B3E917F5E6CF828168965D5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898743, "uuid": "46242887-39a2-42d7-a23d-88a08758abe8", "value": "821568ce55a92d5cbb68f47ca331167f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898743, "uuid": "c3435759-9c7d-475d-898b-3fdea34ad5ce", "value": "192:E8NduKA+RQYUSh7TZM02VzA6HlBdTQOtdB/gtAsE/NCfH4quxcEC2UT/mmnVRwiy:E8NdLiZm0gtDCGog2UCwwinPFHUsFk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898743, "uuid": "d99362f7-cf63-431a-a64d-bdbbd1dc86d3", "value": 32768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898743, "uuid": "2532b87d-dd41-447d-9d5c-1b0d5a1df8f1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898743, "uuid": "99edc5e8-12da-441b-bddc-0887efe841c3", "value": "SecuriteInfo.com.Trojan.VB.2504.16649", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e82e5fb9-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898750, "uuid": "6d672390-b70a-4f0a-bd11-615f3596697a", "comment": "Malware payload", "value": "d1abdc3faa14122cd460be0f55e7941f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898750, "uuid": "7c3dd4ed-3dee-4577-8b71-cfe9a658da62", "comment": "Malware payload", "value": "3dc0c16c6d9fc840b9c5c398c715a5c4e058127be9a4fa9e2366b71fc90a5fe7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898750, "uuid": "1af54222-4622-4fa0-b89a-8bf89a42bc95", "comment": "Malware payload", "value": "740ab93621be4b7e74d70fdcacd399bef3e72c7d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898750, "uuid": "807cc920-f520-4132-a640-62ff25538a89", "comment": "Malware payload", "value": "13b05a39e831059280fb721785377c843d9fc6e29bf1250bd2cda8a317629e391db3b8efc9725beccee535e1b31a616d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898750, "uuid": "5f0398e6-3ae5-47ac-8c89-b3df294321cf", "value": "T11AC423BA8FD5984ACA4A30324588F728D7993C3CFB179953054EE13C1D2E6BDE77A181", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898750, "uuid": "fa54c0db-7ccc-4d47-bc21-61bd9367aa39", "value": "d2a929dcfe69974be4acf3d51dc42776", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898750, "uuid": "4fc08188-969f-4428-9e54-fe342d3b2ea7", "value": "768:z/vbUPNM8vbavbxwGJZadtuEXHVkEPj/hEjkus3eOvbj5rnryA:HUPH67aj/ha6O2jQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898750, "uuid": "8317c133-d62b-44a6-800f-00b2edd53600", "value": 577536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898750, "uuid": "b3a1cc4a-91a2-4a6e-92d2-79953dc21160", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898750, "uuid": "c30743c8-2c6a-42be-b6f3-01240dd0c824", "value": "SecuriteInfo.com.Joke.JOKE.Prankster.23609.29891", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4623e2c3-1ea1-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688938851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938851, "uuid": "8f1298c9-67d9-4f3a-a2df-d8b27180eb6c", "comment": "Malware payload", "value": "0acf58c196779346f15f67f3fb702101", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938851, "uuid": "d0717f7d-fe09-4031-80a5-552532899efc", "comment": "Malware payload", "value": "3fafeef0d793a10abb8332320f936fb23a799739843a95d0b4b9f83df1ed00c8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938851, "uuid": "854eda98-bc73-42ab-97dd-8b13cdab402b", "comment": "Malware payload", "value": "2a299513c10ead10a9fa415dc91fd08ba5320e86", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938851, "uuid": "faf71570-a4bb-42a8-a1af-85dde8c0ff12", "comment": "Malware payload", "value": "516edb2f7226248ed63389aaa0f934dcdc7d5720e5f576574b2dbfa31929f6fa577dbd0bcc35d2d8bd81300bef8bcd9e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938851, "uuid": "ca22b153-c05a-4a67-8c1a-694bbe4d4491", "value": "T164348E0272E06871E5675F368D39C6E42B1EFD918E6567DA321C3A2F0A701F1C672B1B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938851, "uuid": "124d3301-9b49-478f-844b-690b51d4728f", "value": "b8bb1998da6e1dd20543d0f6d4a62d49", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938851, "uuid": "3aacb477-107d-426b-b4e6-80f606f0f15f", "value": "3072:OwOUENcKbdW6H47Lix16VxbpSP+ETnoF7PBfh02Hrk:ODtw6Yw16PpaToF7Ph", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688938851, "uuid": "f31a01b8-114d-42b2-aa66-97a33707c763", "value": 242176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688938851, "uuid": "2b7ec21f-727f-415c-8873-516d1b49ebaf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938851, "uuid": "e5e1883e-92ea-4ae6-b97b-8f93c4fbd759", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b97028f-1e63-11ee-b3cf-42010a9c0076", "comment": "Malware payload (DCRat)", "timestamp": 1688912124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688912124, "uuid": "0bf4ce79-d382-4917-a49f-374f4d4766a2", "comment": "Malware payload (DCRat)", "value": "276347db68c81c7c150e52c7de992c10", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688912124, "uuid": "c136e37e-f7c0-4f82-8f94-ac74c189141b", "comment": "Malware payload (DCRat)", "value": "3fbed53e3d2a996e7d4c83f06bf037a79c60a43398297109ed7332d3de9f2af1", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688912124, "uuid": "313f18cd-df4b-452a-8c9c-fe5abfd5ea81", "comment": "Malware payload (DCRat)", "value": "4ed03ea2f5e8e31140cd5715472190d1f2fc20e8", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688912124, "uuid": "1e3d9b9e-6557-42de-92af-6f3f6fad0912", "comment": "Malware payload (DCRat)", "value": "a490f9ac862fcf1025ddc507263df32cd51a97147136bd9e95abed0a4fd4c9a2fed995527372675bf5545f62fa3e4a06", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688912124, "uuid": "e1ce3a89-19ce-4da4-84df-abd24bb3c654", "value": "T1D4C5D0027E44CA21F00D1633C3EF454887B4A9516AE6E32B7DBA376D55123A77C0D9EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688912124, "uuid": "34328c44-0449-4ac7-a8d1-5ce24f900366", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688912124, "uuid": "40066a80-bafa-40d2-b98f-e6e829763562", "value": "49152:5gq416lNmcgd2aQEvzMMety4moyiEa9SXVK2cQ/N1590Fl11fBLSOx:mqDlNmcsvoMevgySFK2L/N18Flrj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688912124, "uuid": "36f88eec-c59a-432d-9682-8fa8bf2e7991", "value": 2740224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688912124, "uuid": "393fe60e-2124-426a-bfde-a8e96dedfab3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688912124, "uuid": "e3aa390a-b2c1-4fd7-8455-9b00c8766ab6", "value": "276347db68c81c7c150e52c7de992c10.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04d6f3ed-1ea9-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688942177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688942177, "uuid": "96fa9d6d-9208-40eb-8340-80d857cee829", "comment": "Malware payload (Mirai)", "value": "28ad58de071828bb41bfe2d86cf33f41", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688942177, "uuid": "6c53bacc-099a-4709-937a-da594756627d", "comment": "Malware payload (Mirai)", "value": "411233d1f14c71d3f52671294b2b7fb0bb0faab4ebb6b8d64720e2920c4ed364", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688942177, "uuid": "567da6c6-aefe-4432-af47-00047032211b", "comment": "Malware payload (Mirai)", "value": "b6f71e5bbe6c481afe139b138456badf227dbeb6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688942177, "uuid": "4844f24c-5ed8-4e1e-acc8-197f8cc8c9b7", "comment": "Malware payload (Mirai)", "value": "1b5be4b2152682c184b43a3faaccfdd7dc79a7ab8873e30d4f6bd38a2be1f5e10cd87527ccb5ea5e050b5a5550ae6776", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688942177, "uuid": "796ac9ed-3b55-4647-b33f-50bca8abc422", "value": "T1CA735B24A97A2E26C1D4A17E62FBC321F1F6230E25B4961C3CB60F8EFF1465464562B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688942177, "uuid": "7bf7229f-cc5d-47ca-9d1a-767516ab5a07", "value": "1536:ubHmkTSo3BOIqS5aq+Dc035R9QuEk6vNNicKzfyFx8:kmcjaq+Dcc5J+vN4Fzf+8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688942177, "uuid": "149d655b-3ffe-4a0b-920b-eb700a54ae31", "value": 74572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688942177, "uuid": "77264a0d-ae6d-4fe6-a07d-03f8ecadc27b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688942177, "uuid": "3d8fb9eb-7c5c-4f88-8ddb-b12baa0ea87c", "value": "28ad58de071828bb41bfe2d86cf33f41", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a55ef2-1e47-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1688900482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688900482, "uuid": "8d751397-2a09-44dd-b989-4aec66dd8595", "comment": "Malware payload (RedLineStealer)", "value": "641a109a5368af53d6dde369592719ad", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688900482, "uuid": "76de529e-6d46-4469-9176-ea9048065337", "comment": "Malware payload (RedLineStealer)", "value": "416bf8815d67a276a4c12d51f4c12b215db6dc0bf18e7caad56c0b19b8e2a56a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688900482, "uuid": "a9fbe4a7-dfc9-42b7-a681-5dea60cf68fe", "comment": "Malware payload (RedLineStealer)", "value": "ee5199257dc8cbbae9a5696a1c508dab21b0e2b4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688900482, "uuid": "77960e60-2f82-4056-ba71-4fda09685cc6", "comment": "Malware payload (RedLineStealer)", "value": "d05d143d9783f6666a043d8e75d42fa84a3860e7547ccf465cddc997190c4e9c491ecf2916d24cd3e9f914a198983e61", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688900482, "uuid": "1438457e-d1f6-4ac2-94a3-4319898ef7c6", "value": "T11CF46CB0368C7163CBA2D0BB05ACE62105EEE7A0875117D315967AF9B71C2F0AEF24D5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688900482, "uuid": "dc248958-fabc-4599-b0f3-0fab4df11225", "value": "093f2e844ceaf0d0a2269c3f3534b323", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688900482, "uuid": "24a9cdc4-5221-467c-8aa2-576b8661b729", "value": "12288:9V2wi1TgegQS2LoVbHFAMJ3Zcg4uauif5mm2pq01z34TRppn:rGNKFAU3S25k01TIB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688900482, "uuid": "571df06e-fd45-4f28-b90d-0019829283cc", "value": 783968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688900482, "uuid": "1ce06174-4973-4b3a-8e38-d424b2d6cd5b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688900482, "uuid": "edcafc38-95b9-426f-a782-47c032f6b504", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c2af88b-1e54-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905924, "uuid": "d6b782a5-6c2a-4bf2-ba2e-6f844f5a6730", "comment": "Malware payload", "value": "3c35a26da2a5381674c23520dc9b0b10", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905924, "uuid": "e5d22523-749c-4677-b7b0-d0c5d9570056", "comment": "Malware payload", "value": "419b4ad8016140763fa85d48f5cfc86cee54484fcef6142fddb949c693590e6d", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905924, "uuid": "b18911c4-785d-4505-b712-9fe6f634cac8", "comment": "Malware payload", "value": "1cf74b0aecb52cdb478353a3c69f60b019c3cc35", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905924, "uuid": "24c7a825-741f-4274-9061-408c87316c99", "comment": "Malware payload", "value": "5bab3329cd50378366e78033d0608350a9670db3600fb3e3002e1bd5c3e13655bf6220bfe249b4d68e19e472a714af33", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905924, "uuid": "305f3740-7a59-43a1-b117-fe1218baa43a", "value": "T1B5760147F358B92FC4F7C3320A7A163621874D2687439B876E68723C28B76D44E5ABD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905924, "uuid": "090977b8-3cb2-448a-bace-86675b4b4b77", "value": "196608:BdiBkJ2ZpWnG52xQsneTe1dOLnLIEfzGN:BdcUxG52qSOnLUsza", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905924, "uuid": "920699a2-ce9a-41db-ab24-6f2c9ab3efee", "value": 7684090, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905924, "uuid": "59724925-521b-4871-be32-a594c3f9907a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905924, "uuid": "694e5f63-52fa-4e69-8560-2df63aa6abb9", "value": "419B4AD8016140763FA85D48F5CFC86CEE54484FCEF6142FDDB949C693590E6D.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f87e04-1e9b-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688936490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936490, "uuid": "1ca6708f-d0fe-443c-98e9-7146a978c58f", "comment": "Malware payload (Mirai)", "value": "10199611f9c632e6d00ee4f8d63790cf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936490, "uuid": "01cb3b24-6d3f-454f-b57c-657f21b37fef", "comment": "Malware payload (Mirai)", "value": "42f1b8d6f30fcd13904acda30d39282f0983ffcc35e6aa7507c5093d9691dd9f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936490, "uuid": "e41b24f5-6b5e-438c-be7a-15ed3c974a15", "comment": "Malware payload (Mirai)", "value": "46b58a26f66b61bcc0ba3405b77041a3aa783d27", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936490, "uuid": "e86c5ba5-a5f2-4349-9f39-cc7a3cdd5422", "comment": "Malware payload (Mirai)", "value": "7d3b5188e46cb93486eb560fab0e8701d495f62b9f42375a695728c40b206e065e2c1048d4411e6d058e9cb79f122b3b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936490, "uuid": "569b62d9-04da-47ef-be1b-b568e12a7d31", "value": "T199C2D0782815B470A370013CFFAD8A8B5BA791F082F431151A505AFE964B5867CBABCF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936490, "uuid": "64088e5b-c868-4dc2-af2f-b9c0e496ed04", "value": "768:4RSa8ZS/L6rze3OXrFKg9KZrqoDux3bHs3UozYI:eSjFJXZBCJDuVOz/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688936490, "uuid": "ed87eaf5-a46d-4be0-b1de-28e6be993293", "value": 26292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688936490, "uuid": "9702ad40-2a87-4eab-9da0-d2760c7a0dff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936490, "uuid": "430b504a-e680-4b41-97dd-7de1ac996725", "value": "10199611f9c632e6d00ee4f8d63790cf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc955512-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688908125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908125, "uuid": "14b8ce57-1a78-4ed8-b503-fa50b7ad84b8", "comment": "Malware payload", "value": "be46e22d69acf02680b902500f20f1ee", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908125, "uuid": "f9844108-a48c-4c5c-a8f3-bcd9a687ad25", "comment": "Malware payload", "value": "43132a5cc771ff90f7bb82a69656c777089714f34563ec0996d8142b344edefc", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908125, "uuid": "6816bda0-b865-456f-8230-c580d0fb05f2", "comment": "Malware payload", "value": "d814b26becd0d1a7feaccb307b70835461993d77", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908125, "uuid": "094641eb-9ac1-4511-8ed1-bdac0211a4ac", "comment": "Malware payload", "value": "49162b735d80d80f373d8c0c6fda7d2664f7b7313117dd5c1a4899fc513c7cce52e5e6d2f43e28e33d1f01adc538a073", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908125, "uuid": "684df520-9278-45dd-901c-0f8cd7fa8396", "value": "T1EBE423862E4F9DC65E19FF34E48F48C405A609EF5738DC4D2C6773DA1A7A80193AE6B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908125, "uuid": "820d9d2d-3cf5-4a2e-a4b8-0f06e80b866c", "value": "12288:3g7uYQ5lB2y643/23aOMhSfEPsxuPg5PnzHlA2tnLQZbXIa1LuNO7ou+sX1cx:3g7M7B2ecaO58Ec45PztUZ84uNSouvXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688908125, "uuid": "cb474baf-779c-4899-903e-766bac7e5e4c", "value": 696101, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688908125, "uuid": "ac39c2c8-37a9-4d5b-a699-54a6b69eb85f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908125, "uuid": "a578b8fa-4d96-416f-846b-e8fbdb539a87", "value": "SFILEANEX_Mbwg0afStVj6ry1po1voX_v_7JeEv8nWxNK.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d625ca0e-1e3a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688894854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894854, "uuid": "143f07bb-77bc-46a9-b818-9ab51e85f1ea", "comment": "Malware payload", "value": "e57c937e200490107fdedcf4678fbde5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894854, "uuid": "339689fc-03a3-415c-a605-243d04f68449", "comment": "Malware payload", "value": "43409a8edbc327cdda6fbfff036e4a273d34188facfab5cd14df11511c69b1e7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894854, "uuid": "c0015659-7327-422c-b1cb-5715787cae11", "comment": "Malware payload", "value": "e87fa382b1388b43b4cd3171b7dd9594bff1fccd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894854, "uuid": "b42aa85c-fd0a-4d75-8300-f83a10dde81d", "comment": "Malware payload", "value": "6e90fd85ea118a4340b82a1e041744b91ac2d8906f821e1b1875857cf81f98f66c1a877cf745e1bcb1c6e4910d644b9f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894854, "uuid": "a2f6a949-97be-4342-ab97-9c59f1ff227a", "value": "T19F222B0AF79548FAD65C4335C97B0A1FE0B5BA01AB52538B13AC40292F523F6796B3CD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894854, "uuid": "f15f6542-247f-4bf3-b79d-337c6535e6b8", "value": "3d1ea09e5ba586b58b1ee6e3dd1e253b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894854, "uuid": "34733b3c-d2cb-4ca3-bf3a-01a1f2dce82b", "value": "96:GDequ3lbh1k3eTXig+JdLperl1GsPFtwnxJ99/ZhqrximDsQ5tfMcXQ67Dxt:GCqu17QperjwnxJ99/vqrxrsQ5tfMcL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688894854, "uuid": "c4c994ff-75a5-41fc-9cd4-89e82bd8d7b9", "value": 10752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688894854, "uuid": "282847d1-247d-47ec-b110-086e94bce81d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894854, "uuid": "1f147d56-9b89-4a78-aa20-7d8d5b849b11", "value": "e57c937e200490107fdedcf4678fbde5.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67f08dff-1e30-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688890374, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890374, "uuid": "b45ceb3c-bb6d-4a1f-8920-f163a500d06e", "comment": "Malware payload (Mirai)", "value": "72ff17dfc976dca72a8a03c804042c0e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890374, "uuid": "376bceae-7db1-4599-9c9b-08b58c29cb23", "comment": "Malware payload (Mirai)", "value": "4482d7ef134f5df07bae2097653af1a1570803b3d374e8d30bb759aad3476303", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890374, "uuid": "a38e4ae8-a093-4eaf-a9c4-a218ad009afc", "comment": "Malware payload (Mirai)", "value": "08150a5342a45f5390255ea43ce086240792b3c7", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890374, "uuid": "73c88361-293f-48af-a899-355c7de37f0a", "comment": "Malware payload (Mirai)", "value": "bb2d9b49a5eeff993f5dd76df657017163e817e9c155120931725579d3497e473b66a893faceec35bd45534c346273ff", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890374, "uuid": "b76aa41a-65fd-4f02-ba03-5ec961628820", "value": "T13D83C70E7E218FACFBA9D23447B75A21A74C339637A1D6C5D19CD6012F7024E642FBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890374, "uuid": "48213801-2e33-463e-8c5f-d79f683bab26", "value": "1536:uJ/UkuSo66VM30FYrGsrCVQXOc2p9OfJgRXzycpOea/YAZ:wckuS56VE02GsrCVFnOfJgNzycpMwAZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688890374, "uuid": "479fbb54-a8b3-45fb-985a-1d514f495fbd", "value": 84672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688890374, "uuid": "d7ff4bcd-2045-4acf-930a-993828e51e3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890374, "uuid": "4f79624d-6fd2-455e-b5ed-0034c534e813", "value": "mips-20230709-0812", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35015c9e-1e7c-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688922930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922930, "uuid": "5566f6cf-800a-4910-bbc0-73bc917e7ec7", "comment": "Malware payload", "value": "413306e715e1e34a73b1df50372b9541", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922930, "uuid": "da34b60d-094d-42bf-ba2c-ed838703c8ae", "comment": "Malware payload", "value": "46f1daf2cde03fc625db9bbeceaa17e4ec263c6414508dd0a638545859b823b4", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922930, "uuid": "065fe745-dad0-4668-bc9d-1d654a313c72", "comment": "Malware payload", "value": "335875d3e540f5fe722a84467ca2092065172bd6", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922930, "uuid": "f90f67ad-8201-46da-9ada-6195848be07e", "comment": "Malware payload", "value": "67c1f40323aefa17dc4052b073950bbf6ab2fa389f12bc0656fc783e73f1550b35df28f3bafe191ab4acacf2a1bc6677", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922930, "uuid": "f3edb5df-2691-4bd3-94db-5b84d6f4e5ba", "value": "T1ADC3C78A6E227FBDF3DDD77087F3DA2056E6669127928280E1DCDD504A253CC281F798", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922930, "uuid": "af234b2a-4469-4a3a-b83d-7a582a1f4055", "value": "3072:OFEwmggyVXQS67S69RcQjiUJfRIKwfj2JiSwB5O1i4I94:6950ZzI2JiSwB5O1PI94", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688922930, "uuid": "b24f3bad-4689-4719-8828-77d6f9757e68", "value": 122503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688922930, "uuid": "bfa2899c-0b5b-47ea-8fab-1c758fcb15e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922930, "uuid": "da65b812-60cc-449a-ba48-40dfffd10d4f", "value": "mips-20230709-1715", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dfeeab6-1e9a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688935804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935804, "uuid": "a0f81a9e-9bfb-4b9a-adee-acce778de5be", "comment": "Malware payload (Mirai)", "value": "56792d68978c33aeb24c8bab1f3749a7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935804, "uuid": "62aba238-74a9-4a9f-9e5c-b117a533a000", "comment": "Malware payload (Mirai)", "value": "47caf2a2a069c132e8abaca7fcca0aa367af21b59dfea403931ff659f0f5690f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935804, "uuid": "e0298fb1-f2dd-439a-b482-ffd16f8f9387", "comment": "Malware payload (Mirai)", "value": "7b4fd141d1bd9709bc60ba2ec1ea83761c563abc", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688935804, "uuid": "5d0a07dc-dd03-4484-ba70-92ca542da85a", "comment": "Malware payload (Mirai)", "value": "d48f0c8f4aa3228efb80ae4d6122c773c977226ab1d6cf29b6f9c36821dba34ee0373cef2009e41f20785c80562fe21f", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935804, "uuid": "c631424d-f43f-4a1c-b0f8-543b18aa199b", "value": "T15F33F255B044B122C7703637F8261197BF491BFEC2E63437066843E8A8E95E379F6CA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935804, "uuid": "b0c93d31-7ee0-4d55-a5d5-19759d445ec5", "value": "768:wMte5B4PACtw/YcmRIe18D9q63TxZQbSORe7Su2QJnKE79TLrttkhS9q3UELbOsl:wM84ISRX63dZQbS5rzZttuLIVmWjM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688935804, "uuid": "952c238f-73f7-4f59-b696-e773a66f80e9", "value": 53620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688935804, "uuid": "ef8e8fb0-963b-4f8d-9140-6c55fe1d9a09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688935804, "uuid": "3ed6e5c3-82c2-4b41-b9b7-7a327bdb021b", "value": "xd.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75fe5f1b-1e20-11ee-b3cf-42010a9c0076", "comment": "Malware payload (SnakeKeylogger)", "timestamp": 1688883526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883526, "uuid": "955f21a9-ccea-4f82-b18f-d3eadf8a2deb", "comment": "Malware payload (SnakeKeylogger)", "value": "861c430777f782124d1fdad8d8c50961", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883526, "uuid": "c9517d55-7285-4902-bc56-fa0f15ac2891", "comment": "Malware payload (SnakeKeylogger)", "value": "48aa55cd385c0089fae8f59ec7e9a7ac44a379a67fccc2f2b921ca3161fca87a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883526, "uuid": "9f0259ec-2521-4f23-beef-97875a4ac6f0", "comment": "Malware payload (SnakeKeylogger)", "value": "54fcff4059a042726e0489a82b9c3a25f2b7d0b4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883526, "uuid": "a3714e05-5ccc-4a99-ad3e-5f7408c5a6f5", "comment": "Malware payload (SnakeKeylogger)", "value": "1309588750efb71d8786a37457b2dca661bee7b4cf6a98b5ca436546e5aec6cbd7bfd4e65c6407264f9dab6ed5368823", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883526, "uuid": "fa057cd4-75d0-4352-a73f-9e6833a99ddc", "value": "T1D0741218A2E5C577D1638E7A157D3B267BE2F8060A98064F1B305FAF3A76380E50F761", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883526, "uuid": "461b2aa5-6387-4578-abcd-50858095321a", "value": "61259b55b8912888e90f516ca08dc514", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883526, "uuid": "c7ff1a5a-3993-4d63-91a8-c387f34c474c", "value": "6144:PYa6/il7LK52kXfOtoKpKtx438NNufXuCg0khVEOVNhw3vpHd3SK:PY9il7LY53KYt23YNuftkhVEOVDCVdCK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688883526, "uuid": "34358304-0b13-424a-8c3e-fd063ebc16e0", "value": 345252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688883526, "uuid": "4d469ded-8c49-4548-897b-36bc21b60f2e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883526, "uuid": "f2e1eaeb-6cee-43ab-be59-169ea3ffe862", "value": "861c430777f782124d1fdad8d8c50961.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa30a55c-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884043, "uuid": "835fb267-b91a-4192-9606-b364b96525ec", "comment": "Malware payload", "value": "8e987954a309d1e429be3889a24ef305", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884043, "uuid": "7c31aa7a-a873-4bf6-a040-140019cf66f0", "comment": "Malware payload", "value": "4c42dddc3afb42df79ffc1b794b824b7ed9366175963d2856714e97935c8f2d4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884043, "uuid": "405e1bc6-0ae0-4184-94e6-42d9d0c63737", "comment": "Malware payload", "value": "3b09d9e6bf109da2db77214109a60104af29e759", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884043, "uuid": "2dc5260b-9c6b-42df-a6a7-5416b70746ea", "comment": "Malware payload", "value": "3817f7c73e0d389517b472d3f1105d8ca850c6efc23da074c26d79a66a3ae253644e1087d6576b7bceaa598a8c4899b8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884043, "uuid": "8d2505f0-a78d-469a-aefb-2274c8bff7fe", "value": "T12B157D57F3D29417C66317348CABA7E81827FE246C24799F3DA0BE4CDF761403960AA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884043, "uuid": "4884e2d7-e745-4ea1-8168-fdf26b9389a4", "value": "12288:mRVCaeM4wqcdwG3QwK2hy2NPsR5KP74DQFu/U3buRKlemZ9DnGAet2g4/6KZI:IIaeMscwG3w202RsbKPBx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884043, "uuid": "cb4b632c-65b7-430d-9ed8-2fb42ed9ffd4", "value": 954368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884043, "uuid": "baff86c8-3ea6-414a-8594-f44ac9183d32", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884043, "uuid": "eda01249-1018-47d1-a8a1-d91a1d7229b6", "value": "SecuriteInfo.com.Trojan.PWS.Banker1.13162.25589.2331", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b50eba77-1e32-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Formbook)", "timestamp": 1688891362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891362, "uuid": "00f8b60c-27e8-4d7b-837d-9b8e8af06f94", "comment": "Malware payload (Formbook)", "value": "95c39dfe0e9f97e7cbec2db30e546094", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891362, "uuid": "fc826362-5bad-4ef7-a118-80f8d6a14a79", "comment": "Malware payload (Formbook)", "value": "4da7eacd68bd6d80530b3dd67a737579ea48925de4ad76dc240382f5f8d7974c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891362, "uuid": "16db04eb-c323-4cce-88f5-a2e4811f0fc8", "comment": "Malware payload (Formbook)", "value": "d81d301e5c347051fa206b75ca5505b4fb93eaea", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891362, "uuid": "0b55b063-39c6-453b-a90f-c223583287ff", "comment": "Malware payload (Formbook)", "value": "99ce45cb202121a21758884c0a62de436d196c062a76e3d47348367c4f251719df86f106aac9106264f00433b7ff2a23", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891362, "uuid": "fd671a72-3c47-4819-8810-3c6375b2d466", "value": "T1AC44CF0275488075E87BD5785CE8CA7497BC6434279F64EBB3C8132DAE297F1B63930A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891362, "uuid": "007c743f-d2f2-4ee5-9d66-3f95c71bb813", "value": "ddcccd7f5247e71ea0dafd9c36729ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891362, "uuid": "3b039da0-d467-4928-b0d1-46d7f75878a6", "value": "3072:FEhFiKcVIAqEKK/CXIAgDnFw1Z4koV+TD6yMkD98eQnu73duE12TIISUp1AHJfxY:FEhDAqEK7SGH47+IYZujT7LpKQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688891362, "uuid": "af62309a-d317-4c15-8bce-a2d53e738b70", "value": 278624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688891362, "uuid": "b375f226-cc6f-4762-8597-7a80a137edfc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891362, "uuid": "fc3a60c0-d912-4695-80cd-aea66adfc946", "value": "version_v319.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d0fbbf9-1e5a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688908287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908287, "uuid": "7055ee17-76df-494a-b69a-2202d2fa534c", "comment": "Malware payload (Mirai)", "value": "641a5fe40bf0b2a68a2aba6d90346185", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908287, "uuid": "60159665-6fca-4117-8820-e2f86c349d48", "comment": "Malware payload (Mirai)", "value": "4de769679a31e5abd365842f43f0f0657b70f1a54f3545cec1432899f064b398", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908287, "uuid": "f5afb87e-b8eb-4e6c-9413-b3c99ba0f98b", "comment": "Malware payload (Mirai)", "value": "949ac3b5b4e24addedcb5467d46f42c888fa4c4f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908287, "uuid": "b82282c4-9889-429b-8184-4396f32731d4", "comment": "Malware payload (Mirai)", "value": "84e64358c030a18c846dc263be59e057241aaea2c877a5b96ca599d48f4c4b9b959ed67e48a424e7384f2fe314ff5d63", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908287, "uuid": "b97c75d5-c1b1-4433-ac7b-3a5e012c70d4", "value": "T196E2F1A7D371A052CD782BF2F96985CB67BD5E6CC67A30A316055A282A5A0434F3C8C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908287, "uuid": "f1fba23b-66c2-411a-b054-a2c87bc9753e", "value": "768:PoiWiO031vpAPbrVWZK3XVGxm9XsJx9q3UEL5In:Porm1vpALgUJsiLg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688908287, "uuid": "ecdc2623-7e29-4fe9-8805-3c173a5cad58", "value": 33028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688908287, "uuid": "92d16c1d-b53d-48f2-aef1-9c80144fb972", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908287, "uuid": "1765f127-06a5-40a7-b64b-439531e7904f", "value": "641a5fe40bf0b2a68a2aba6d90346185", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e214cf5-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907913, "uuid": "d6323bd1-1c6e-4a35-a64c-17d276ea7325", "comment": "Malware payload (Mirai)", "value": "76a60b71bd8ee45870f0f9bc003dfc49", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907913, "uuid": "0573ecf3-4661-487b-9a0c-88b7a9fcb32f", "comment": "Malware payload (Mirai)", "value": "51a8119a144de7ea92cc75ec7a0948b737b8ef4bbe7d0481479668e1668dc292", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907913, "uuid": "82e32943-26ba-4511-be05-974173e15664", "comment": "Malware payload (Mirai)", "value": "ae9c85a18dd2c3945ec8df7850fb6f412e065cd7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907913, "uuid": "51b93141-05ff-40c0-8a83-6d65462158a3", "comment": "Malware payload (Mirai)", "value": "eafb1dc9b524499fad96bea7a49b1af6e454e3810004963e33c6fec2d2438c1ddbd74c83736ce4dc32483609492a3996", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907913, "uuid": "d9f75ecf-7b57-47a3-a274-c488aba08f89", "value": "T1BE536DCAB8119E7DF5CBE77E84220D0EB821726150931B27BB6FFC837D721648956E06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907913, "uuid": "b001a360-50b5-4c31-8f3e-859d927611ba", "value": "1536:AXyRgQF4TbSX5lxLepSGY5cFnehON2PPB+qG76E8l:N1TjJ8EVGOT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907913, "uuid": "d37373ee-ec6a-4d2b-899e-d5b30f33a87c", "value": 66504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907913, "uuid": "5bbffb0e-f73e-477b-8530-2a10d80b6950", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907913, "uuid": "8fd82eba-d4a8-427a-ba05-e9b44973179a", "value": "76a60b71bd8ee45870f0f9bc003dfc49", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a81d4bc4-1e32-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688891341, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891341, "uuid": "fa605489-c521-4ffe-9d19-4316ee712f0e", "comment": "Malware payload", "value": "3376ce52812152d33bf25e3a15b1f214", "object_relation": "md5", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891341, "uuid": "364dc2f7-9dc2-4099-97d5-721249a97e56", "comment": "Malware payload", "value": "51de0603a2266f3b2584125df1d260de2c93b8273674846aa46a0263bab7dd79", "object_relation": "sha256", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891341, "uuid": "bb8bbcb0-bc05-49be-a304-718f1d814265", "comment": "Malware payload", "value": "c497b2ae0fc22bc44f11490d0813c18a8c7265eb", "object_relation": "sha1", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891341, "uuid": "c89a44d5-a32c-4be7-8c1e-bd82ad031b54", "comment": "Malware payload", "value": "c2230999e72b3d9f388860518cbd91d2dd37ba35eb2c7490fdb9cc995569c40ed46a6f5d875c4672d00dfb215b0d99b3", "object_relation": "sha3-384", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891341, "uuid": "74c3e569-774d-40e6-84ad-da73b0724edd", "value": "T1E576333C769A20CF95B233997A13E93D3FD03EE75D2891D9F1B1A78B89845448D62E30", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891341, "uuid": "ef1f8614-f8ed-4e59-954d-ea9e26eb00c4", "value": "196608:BD4HGy0D1K0i3hdZAhD00kyZlsVfapXlvRusoKRW:BDgH0BK1hdZAhDsayt+lP/RW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688891341, "uuid": "2287b9ac-73c5-4f36-9213-7a879b884f3a", "value": 7800474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688891341, "uuid": "ed9a8703-4901-4750-a07e-b31b7ee2df9e", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891341, "uuid": "0cf690b4-b650-4b30-91c9-c09bc06d8e3f", "value": "Midnight_1.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef7820dc-1e95-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688933981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688933981, "uuid": "cc97c26c-063a-4c75-9cfa-04de2dbdaa14", "comment": "Malware payload", "value": "393471ced10df9aa25350049ad7d3b90", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688933981, "uuid": "9c82ce64-b535-44bd-9050-8a66091096bc", "comment": "Malware payload", "value": "55ffe288d37d3f6d3c7d52d857c3b69c57277426093569bb31edcdd5523ac7a3", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688933981, "uuid": "92227d9a-627c-460c-bc97-db89f0f5d981", "comment": "Malware payload", "value": "518fcc7e7da5b320f213379e5b40c688eedc9707", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688933981, "uuid": "70edefd8-832e-4530-8ca5-bf97b58c4137", "comment": "Malware payload", "value": "c5ac10a982bfab8f00259485625d60e0419358ab748ed800e9a935959c06b64ba63b22bf33b464657ac3dd8ecc96d5a3", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688933981, "uuid": "902e53c5-2b73-4a6f-b9da-23bea04bb92e", "value": "T15DE52343F2629C67C8F2D3320665263614778E188B43B78FA95CB3F838779E88B855D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688933981, "uuid": "58ae0395-e6aa-4dd4-ab01-166545a69f61", "value": "49152:D/W67xMqhpwuIQlKrG7aS+XT/oibFzw8YKXbirCBxDrYyGhIsdzNPKGzDbaqmv2b:LF7xMypnIQlKi4xbFzwAirC7nSPQFqr/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688933981, "uuid": "db28a0d5-f4e3-4870-af76-6eb95f9df6b5", "value": 3032859, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688933981, "uuid": "79c5da7b-517a-45ea-a17e-4c902ac865d5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688933981, "uuid": "f732aa22-671e-4a75-ad33-799c1dba233a", "value": "EdalatHamrah7.2.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4677514-1e52-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905186, "uuid": "dd9676d3-3bea-4fea-848d-908ee6a50ef6", "comment": "Malware payload", "value": "feb6a40e14a2545a0df8e14bd89cf4e2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905186, "uuid": "a459e2e1-edfd-4dd3-a92d-d8bf4af24a7c", "comment": "Malware payload", "value": "573f73293639229e2db40f5952eb90f2cdc25692622c2206ba4a4367b2f4f171", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905186, "uuid": "1629ec27-c8c9-476f-8c8b-2d2de2a86e94", "comment": "Malware payload", "value": "83d7f3b1d151ddbd931a2509965c6a241d4aa125", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905186, "uuid": "900998dc-c79a-499e-b138-bf68923e61db", "comment": "Malware payload", "value": "4d78d7b43a41db87662f1d6df1982d6b07b78941976f283201e85c83be19081c6e6ec09d8a41fc79d10907539ed7c5b8", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905186, "uuid": "212a2bcb-17d7-46bc-8b6a-ab2735583d14", "value": "T183C31AC7AF227EB7D8CBEF7796E5C70030DE940217A6276571B4DC60E20E98A18D3568", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905186, "uuid": "68742e86-0871-414c-a5e8-7e561e34c460", "value": "3072:Cv28HhFyN6wTdDlFBVMuZi0OG47ISwB5O1i4I54:03HhF8dDjBVMuZO3ISwB5O1PI54", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905186, "uuid": "40d8f43d-77b6-4e44-8c90-0661caa94c1e", "value": 126523, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905186, "uuid": "33a16477-3006-4e48-98b7-66791703fb03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905186, "uuid": "77755fc9-1e1d-4cc5-8174-7fb13afa07b9", "value": "mipsel-20230709-1219", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7aae7a50-1e92-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688932496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932496, "uuid": "d027377c-9cb8-4135-a45c-e546ebb3b6f2", "comment": "Malware payload", "value": "da2847c486cd4feeef7f12df155852ca", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932496, "uuid": "3916286f-f1eb-4acc-8dc7-23a46a923b31", "comment": "Malware payload", "value": "5a6bfcd6be211821bd7efa8549d86850d555821ff8daa5b01b8e7eb1620014f7", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932496, "uuid": "bdb15e63-813f-491b-8036-530f96560cc1", "comment": "Malware payload", "value": "112a5484b34654ce4ce52ca244bc55903c5f49d3", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932496, "uuid": "d2b73233-11b5-422e-a4dc-2f7fc78406c5", "comment": "Malware payload", "value": "e5f6ded77d80e4382672a185317851261c296dab78926d34da2968eb7da361aef19bcef782e7b66064457e8632ec0068", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932496, "uuid": "c1d37755-b146-406e-af93-920fe1ed7408", "value": "T119F2E11010DB08A1CD682E7EFBB508CD2255433D547FB0BAB780D19EE3B1D6A17B9E91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932496, "uuid": "70f6b827-ccab-4335-aa9b-06cb0f049b9c", "value": "768:hfyM5v4oMU/hMypeeLOCtywwHpNEiNeWVIzjdDPb6b3Ua:hbFMU/hM+O+zUJkWVkWP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688932496, "uuid": "762d7eea-92bf-46cb-b025-85e23abfcd3f", "value": 34616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688932496, "uuid": "9e2d45fe-aa0b-44fd-a1e8-b2384663ef46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932496, "uuid": "0eb9e0ec-d218-48c1-a04f-ec486429bc27", "value": "arm5.nn-20230709-1954", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a114087-1e63-11ee-b3cf-42010a9c0076", "comment": "Malware payload (DCRat)", "timestamp": 1688912121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688912121, "uuid": "58767941-99cd-4dfe-871c-7e9995061fc5", "comment": "Malware payload (DCRat)", "value": "89a27d69950062fe0aec951b17848232", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688912121, "uuid": "9f86b031-2080-4410-94ea-c868787b7d9e", "comment": "Malware payload (DCRat)", "value": "5d07c08992d9bfb68a6c37d5d6d15abc9afcb45c3dc5f0db80afeb84339c8960", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688912121, "uuid": "fd10487f-b91c-4395-962c-0df5b70307df", "comment": "Malware payload (DCRat)", "value": "3d4054693fc6b13d966207af6aedf68866481824", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688912121, "uuid": "b252c148-26f4-4e6b-a9fa-16af08f0dc80", "comment": "Malware payload (DCRat)", "value": "7248da3089e2cfc845b7a22db833fc84aec51cc4c03cc8df35bccef409d4650d96076486dd151c162da215e1fc083f93", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688912121, "uuid": "66f853dc-b048-4aff-823b-f1e145d96987", "value": "T19645073D18CAA567D278EF964424EA59F2C3B74237834BBE75C2C6A18102339F6D139D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688912121, "uuid": "acdfaece-26ca-44e2-a654-e1bd8929e424", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688912121, "uuid": "f7e16f65-4313-4030-8857-1ae173de3430", "value": "12288:Rk+jz9bbHMmNdpHsKrxrLSd4IcaG7yfY254ODle4/eyTIHinEZ1KGzV+ZfRXQUGm:5ZWR54ODle4FBw0RXQ05g+qAjq4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688912121, "uuid": "9ed03fc5-4c1b-483b-bcd8-9a299ee7c4fa", "value": 1208832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688912121, "uuid": "d39e95f8-95c7-4a7a-b249-d0ebfb4bba3a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688912121, "uuid": "5dc83e38-f995-45c6-b51e-eb38b0cdc8b2", "value": "89a27d69950062fe0aec951b17848232.bin.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32227c54-1e38-11ee-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1688893720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688893720, "uuid": "bbc49296-b98f-41f2-9565-44e69cdc1ba2", "comment": "Malware payload (AgentTesla)", "value": "311d4bae516d3cdec05f0dc98166fdff", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688893720, "uuid": "af3b0cb6-aedb-4d4b-99fc-2d0467be6dca", "comment": "Malware payload (AgentTesla)", "value": "5edaf3d22e98b27241e8dc077498ed636452db338dce8285cdfc003fe8071c86", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688893720, "uuid": "523a8337-580e-4f25-80a6-db39b1390e2d", "comment": "Malware payload (AgentTesla)", "value": "232f7cbbe0926aa0f07f73ccb50375f65b63754b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688893720, "uuid": "876bca76-a8b2-4690-91e1-2788a1ffa6f8", "comment": "Malware payload (AgentTesla)", "value": "5d505f5b3b490926866b327d5623818c93c93976c75420b715f130d4d3f61d2d86a1ec53400ce4a8974c58206862cf34", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688893720, "uuid": "00c0f8bc-e20b-4c13-bfc9-1917bbad10e4", "value": "T120E401127A33D76AE028D3F2043520D12379529528FDD62C0CCBA1F99E7BF145AA779B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688893720, "uuid": "8cfad615-5c77-44a8-ab76-e785a2ae9011", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688893720, "uuid": "7ac9d7d3-4a74-4869-8d8a-37b5851f0d39", "value": "12288:c4C6DCBwrKSSaDLsS6CsfZzUKZkqRgSd:vRNLs6GZzRHR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688893720, "uuid": "686b1b7b-5508-49d0-9561-daf69f937bbc", "value": 667648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688893720, "uuid": "dc85f886-4d4b-4fee-9146-17e8a945ffab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688893720, "uuid": "9fc6d21c-b22d-41fe-b4ec-a9c4bb4eef09", "value": "311d4bae516d3cdec05f0dc98166fdff", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab615595-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884045, "uuid": "0258e785-5a3a-4fa4-817c-b6fabcb14b32", "comment": "Malware payload", "value": "722eccdfc752820bc95a38cdd9061eae", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884045, "uuid": "12406a5d-3a2d-446a-9560-ae8215d5ef55", "comment": "Malware payload", "value": "5f6ac983d2b0b367d9d1daaf3abcae2f21b43bc3e3200e988abbabad38992896", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884045, "uuid": "42856124-0555-497b-8f4b-ccbd446e9080", "comment": "Malware payload", "value": "738f3f6d004f56fe79fac6332be724e734c43c77", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884045, "uuid": "f06cf73b-9884-48a8-b4bf-eee275020cd0", "comment": "Malware payload", "value": "11dd7f1797645ffa1f62b24c13e3011b1658be8d77e8157bb1f791c315e8a3e7442a0a1bcea424e523dd4ff068bc4178", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884045, "uuid": "902fc3eb-7272-4605-a3be-29e806e33f30", "value": "T182A26D49B7A4EE7AE0096D318CA7976967A1FC11AD650307B4D43E8FFEF06C00D12934", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884045, "uuid": "38ac3a11-7eea-4f69-afbd-4bf762d0b3da", "value": "be19e18d6a8b41631d40059031a928bb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884045, "uuid": "c8d359c3-1e2e-4ac9-9c67-6b3d3083a77d", "value": "384:/T6Q7sPtOZ7jfspqLNQ2LImskD1tm4irJW6rNXEgVjwDXZmtwR:/N7sVO9fNDImskkLXEXItw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884045, "uuid": "31131319-395f-4c7d-bd72-5642f8cb1dc1", "value": 22016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884045, "uuid": "e34c8e34-1aa4-44b0-a81a-4877732e4571", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884045, "uuid": "8446aa32-5a4c-44a4-a6d4-ac39253d64a6", "value": "SecuriteInfo.com.Heur.Conjar.1.436.5484", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c08c6956-1e9b-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688936479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936479, "uuid": "3f6008ca-4b35-462e-9f3e-cd957998511c", "comment": "Malware payload", "value": "30d02bf0e9c7cbffb875c7731b3abcff", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936479, "uuid": "16ea1cb3-03c5-4d70-bb0c-f3c6d4907e2c", "comment": "Malware payload", "value": "621ee159a6425a3d69f7cd2a307d963575ed54a5a492f5732006288dd5f3130b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936479, "uuid": "388cbe6c-9140-4126-9511-cf0fd0cad9e8", "comment": "Malware payload", "value": "9edbc9006b1c8c14db997abbd40b1b4a3fc8dd76", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936479, "uuid": "481c2058-69b6-4aaa-b153-53d903177ac4", "comment": "Malware payload", "value": "eddd00cc6c13c235a10e093f4bc7335d512a7319838c9362a9b83403db1e22f45c4d2d586fb1cd62ebd1a27d6372d87d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936479, "uuid": "4d267b3d-b154-4725-8ea4-2b3b2a2ad8fb", "value": "T17DE2E19E61E42EFADF8D483D528C053DBBC6589713689B85232145C4A66E4E8F4DC07D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936479, "uuid": "312f913f-ef52-4b64-9489-725b40576852", "value": "384:W83fpCLrsjHIX69URc+hmnulY1qHprFKt6zhS45vDajssVwfRbgXaa3dRWGVCz0a:WsfpWcehzJFYKgULAssKfRbcaa3rWd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688936479, "uuid": "8165a046-9b60-4803-baa5-913eeced8807", "value": 31960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688936479, "uuid": "760ee816-27d6-4412-97c4-b053d8ece055", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936479, "uuid": "a1943c2d-1675-4c3e-9260-096d22e3bcf3", "value": "30d02bf0e9c7cbffb875c7731b3abcff", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e024aa9b-1e52-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905179, "uuid": "3eb3a836-ec4f-4753-a7f2-4ab400144147", "comment": "Malware payload", "value": "c22e693d766499a464126a58e55705c7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905179, "uuid": "22f80c56-696d-4c16-aa65-7e9b9860bc1a", "comment": "Malware payload", "value": "6265d5a6016304d9b5e0a76d0536d4926cfea5c273dc8fe2415140e9d3fbb71c", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905179, "uuid": "dc607cc9-a03f-4c76-b4fc-14a0d47a318a", "comment": "Malware payload", "value": "cc56dec80f7a734549477df7a712b061c7d45bb6", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905179, "uuid": "13bce446-229a-4b09-b7d1-0da903ca040e", "comment": "Malware payload", "value": "2832b6dac09886d841efcaebe4cad4a659f8c29abc3bd936a585f4b5b3346ef3c412303d9810235643c7dc4550e0c48a", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905179, "uuid": "f790f31e-5976-41ed-9a18-b23f1fce13f3", "value": "T172B3F7C2AD427E33C3C2EBB6EBDFC1483BE2561497973341A4996FB04A4B9CD1D19258", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905179, "uuid": "3960c731-74c5-43d8-aa14-ace7c4caea06", "value": "3072:p26vd/3uLlqzThAgai5NHmK9J2RtIfXNoaV84:9F3uLlq+gaiZL2RtIfXCaV84", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905179, "uuid": "b1727779-be47-4f93-b2e9-d72e58e8635e", "value": 117394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905179, "uuid": "d87bf91c-b4ad-43bc-9f53-6dfabd2cd8f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905179, "uuid": "64029e29-a153-4b65-9a2d-6d19e0c9c1ab", "value": "armv4l-20230709-1219", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58e9cdaf-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907958, "uuid": "d09786a6-2edf-4e90-838a-d185aeba660d", "comment": "Malware payload (Mirai)", "value": "7ad690468d7ab4efed035ceb56bd8556", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907958, "uuid": "710d595a-367f-48b3-aea5-a4b139de807b", "comment": "Malware payload (Mirai)", "value": "65f7b6a15b74faf79d6c6277c42b7341fd901c7e04bed3e6646aafa5918f8d97", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907958, "uuid": "d9b28c3d-c5e5-4a53-83de-3bd6bc3d6ac5", "comment": "Malware payload (Mirai)", "value": "e77adee298fdb060dcaf90c5fd716d38ce924a18", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907958, "uuid": "3f8bf36b-2637-430a-b6c5-b33b0d9b0c93", "comment": "Malware payload (Mirai)", "value": "7d6c22139b87582cbd5b98540b0ebeea57df5b1aa21ddafaf08091837921115dfc6c3cb0019071d11c3c430c12280ac8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907958, "uuid": "f7eb526e-741a-41e6-bd6a-98b93edbee5a", "value": "T17B632ADAF801DD7DF84FD77B4417190ABA70A3D112831F3613A7BAA3BD721651822E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907958, "uuid": "0fee510c-a0c5-4293-b26d-5a10387a4454", "value": "1536:s3SpcCE7FS7Q80Nn9Q+blJl/3pLTnJRjNem85RQBM:EocR7FS7qrQGJ53R1B85RQBM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907958, "uuid": "0239a0a0-33e3-4a53-9835-a5a0c7ff6669", "value": 66768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907958, "uuid": "c9f517b2-1eab-49c6-9e02-3117ce615e27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907958, "uuid": "c451e889-7d47-4d6f-ab3e-abc5b6f591fe", "value": "7ad690468d7ab4efed035ceb56bd8556", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eacaca69-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898754, "uuid": "85a093d5-e1be-468f-a712-442b792babd5", "comment": "Malware payload", "value": "542d5fc5b87e1bbe98e7c6286cb3ecf6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898754, "uuid": "135f16f8-bf37-4523-98c9-435a16e2bde4", "comment": "Malware payload", "value": "668f3df0d928e280ea684a8cbbfd1a806a80e867214b87dcdd4d0068cc94b809", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898754, "uuid": "df0400eb-1ad2-4670-bd36-47d21a93f506", "comment": "Malware payload", "value": "08cdbc4c65cd696ce76dfd1d4152eb12a7797387", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898754, "uuid": "7addbc40-8171-4f74-a57b-d4ad06d83a4e", "comment": "Malware payload", "value": "0b2f27daf7ac91790e4634dd2364f0935b29a0152964e380a038c43a2eaccb6825174992791812d329202dad2e78a641", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898754, "uuid": "d3ef87e1-296c-4418-aefa-a2e2db14be48", "value": "T1B8D2E19BAB440973D2C4C2F801519B5274BF52B222F3425A9EA7F81A5731D94ED38F2D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898754, "uuid": "ecab2907-0cc9-4f07-90b1-a4a310a8c964", "value": "24:gxUvCwwk2jqxGL5qCiMshmLphZrRTOPPTTz0vNQErVXXV:gxKpxu5DxtntTEPA6m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898754, "uuid": "0940ccae-648b-4be0-a367-21814e884e49", "value": 28672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898754, "uuid": "9a79e5bf-bd9f-4c44-89d8-bc003e66737f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898754, "uuid": "7b419b3d-8745-4870-8e68-d8266afcca06", "value": "SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.20400.27359", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "227f254f-1e3f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896700, "uuid": "2f4fffc6-c629-4dbd-900b-04d96f09fcde", "comment": "Malware payload (Mirai)", "value": "14278e0dec9654a3134cc3a7c8ff8e91", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896700, "uuid": "be05df07-b41d-4556-90cd-5759f86604c6", "comment": "Malware payload (Mirai)", "value": "6704b9acb6021624f92a730f535e4857179e8e90f7d8f3e680cd7b2fb736eee2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896700, "uuid": "dc5ee622-c6bd-4859-adaf-cbd262eb94cd", "comment": "Malware payload (Mirai)", "value": "7b516f20d9433da51f3e6a52cb2bc15462434628", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896700, "uuid": "3f26393a-31a9-4582-860a-df846a1b77fe", "comment": "Malware payload (Mirai)", "value": "87a411dae90b6fbac899a006f2415954d4ef82c408396bcc1ca086464169c2c58a711f82f9fd93a2eb587f7872218c37", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896700, "uuid": "1b5ea786-bc55-43de-a3cb-eb66d328ed74", "value": "T147A34C9CB4124E7CFA8BE8BD90264F0AED21535096931F1B56ABFDA33D23196ED03C45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896700, "uuid": "9646735c-6857-4686-b6f0-6765b4003a7d", "value": "1536:hQ1y6vhfwNdxyARym2uG7NCGg1pRpIiBuWGN8qPk8rqPQkJrme:uY6vyNdgnC/pRk9XqQOrh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896700, "uuid": "10270c1d-0b6f-470a-b1b9-c8173347ee06", "value": 102516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896700, "uuid": "4901d5af-95b4-4040-b41d-e2dff8bb4ae2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896700, "uuid": "42b5f41f-3171-4b93-8261-2f1e2fb9b3cb", "value": "14278e0dec9654a3134cc3a7c8ff8e91", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed5c73b5-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898758, "uuid": "e653882f-77e0-4387-ba49-db90475201a8", "comment": "Malware payload", "value": "d95c277cf42268c9360ccb5566146bce", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898758, "uuid": "d6815ee6-06e7-4849-ad29-f69fcec96b98", "comment": "Malware payload", "value": "670c4ce567470afd6523c1808c6dca112102e62542a20784a71320726f1ed959", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898758, "uuid": "51698aed-6ca6-4662-8a72-5fe9e19658c8", "comment": "Malware payload", "value": "335ade58396897e038e42d5dbaba676fc3654c6f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898758, "uuid": "d482ea4d-806f-4cba-b85c-c55a4bc00de4", "comment": "Malware payload", "value": "b727ef720643375feda2cf8e309a1323b033fa58030e51599e364f1dce391b5cc1224d3cb1ac1475da97058085571e4c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898758, "uuid": "b16483b4-4b6c-4c2e-94c2-8505b8c33362", "value": "T1B0B42910E512D07DFDE354FBCFFE4A6C6558AB60474910C3A3CC58AA87669F23A3316A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898758, "uuid": "f550994a-7beb-40fa-aa37-ee1b1b75c1b4", "value": "7eaf752c5df657aa0493693ff8063215", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898758, "uuid": "43e74c0c-78f4-4e2a-b710-1775f6c9bfcf", "value": "6144:pOOeqP3NTLHmSXdDpeIXmVY1UkFqLk7Spay4kEjiGCz60+C:Q0tma8I2VUb0Lk7may4kEjiGIoC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898758, "uuid": "bb207202-c6da-471d-8512-a14834e6d011", "value": 524405, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898758, "uuid": "e4149429-6f5c-4cb4-a9cc-30afe2b63760", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898758, "uuid": "93d43edc-f076-43f9-b6ce-9d00e934080e", "value": "SecuriteInfo.com.W32.Heuristic-KPP.Eldorado.22225.747", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ac60899-1e5a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688908284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908284, "uuid": "e68680a8-ae3e-458d-bdaa-61fcc1e0f6f3", "comment": "Malware payload (Mirai)", "value": "9d2d70b5843dd863d02841f4b3aca7b3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908284, "uuid": "0f477eba-e01a-4ab0-8048-90f83ed5a849", "comment": "Malware payload (Mirai)", "value": "68ded792ee32eb2e7b84d84c8b26def0af8ebbe9c52e2e24954d1eaa0dec79e8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908284, "uuid": "4203aed3-1026-43c3-b71e-7293485582b4", "comment": "Malware payload (Mirai)", "value": "165c61f91f7b14a2eff14deac8e817c3826d9d22", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908284, "uuid": "ac56539c-83e5-40b3-9f5d-3456e2ce978b", "comment": "Malware payload (Mirai)", "value": "028dd6d8fb21d133cf12d68b45e12c0062d16c5ca87c18cbe1844902c66c76cc15026738b63fa5edca45115077eb85ad", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908284, "uuid": "2bb913ba-b3c3-49a1-a8d1-8eb7d22f35b8", "value": "T1D8539FA5C5ACAE58C71441B8B654CD398723F408A5A76EFBD646C796800BEFCF0187F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908284, "uuid": "fece78b6-d999-4286-ac2a-99d4d70e3cd1", "value": "1536:PaAtVnz1/mUUNztiYmW6ihiYLTofs3wfpWIDNEJ7JC7:P/tVz1eUUfwN0T0f+whWONEJ7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688908284, "uuid": "26b06d19-0bba-4534-a6bc-4af0970683d7", "value": 63772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688908284, "uuid": "7295ee2e-5175-4a37-8dd9-e0d09438713a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908284, "uuid": "c5f24d95-4a8a-420c-872d-cedb1d2bceae", "value": "9d2d70b5843dd863d02841f4b3aca7b3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1201c075-1e5a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688908269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908269, "uuid": "fae41804-52e9-4d8a-a44c-0324b391c495", "comment": "Malware payload (Mirai)", "value": "1c693f3e7d9e346dcb297d79adf8829e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908269, "uuid": "42571671-b0c9-4348-810e-a61028a3626a", "comment": "Malware payload (Mirai)", "value": "6a87566bd4918bb82cd83eb9f137b825290f2e3c12aacc10c6e80cc0e0ce3ce7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908269, "uuid": "52579b26-3dd8-4ae4-8d38-1195dbbe05a3", "comment": "Malware payload (Mirai)", "value": "6ddbc2f2483328eba69d87066ca6333091521d2b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908269, "uuid": "16129791-3f2c-43bc-a5ba-c7b41f2a34b3", "comment": "Malware payload (Mirai)", "value": "13748b42117e0ebe8017a23ebbc0349362f09db8cb26bcc1ee9c861519465a9645fd81fdbf06cdab576759f1c70f925f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908269, "uuid": "15acdeaf-876e-432e-9b76-f1cca6f9d679", "value": "T157B2C0F487D19B07C6B0B875E3788FA2563B05E4D6F229261B1092BCC69645633FCAC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908269, "uuid": "c047102f-43d4-43ea-94cd-8eae53ef1fb2", "value": "384:4C9KXlJIDFUS0Mggks3aIrokYVDoDDRRKj55N7LB9U+BJUDL0xhymdGUop5hu7B:4C9KQFH0rs3zWoDDRsjt7LB9U+Boms34", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688908269, "uuid": "856a6af5-b065-458c-8b89-6f400f219c0b", "value": 24536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688908269, "uuid": "00bc2367-e8c8-4275-9cb7-ef032f2e3269", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908269, "uuid": "1209d56d-00a3-4153-857f-f16d5ac855f3", "value": "1c693f3e7d9e346dcb297d79adf8829e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c0b0cde-1e30-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688890381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890381, "uuid": "09e3a635-6b86-42eb-9820-8fe6fdf9f4cd", "comment": "Malware payload (Mirai)", "value": "bfcc19aad0305cc6271c35453dd8ac86", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890381, "uuid": "dbd61797-3a9e-4f4b-96c0-f36a4c6d6c31", "comment": "Malware payload (Mirai)", "value": "6b1e1984bbba08ecc685d5a3f85218796f18b15b42e686142ac3725b65c9afa9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890381, "uuid": "440cc4be-f26d-4dd6-bf91-d5d2ee3d272b", "comment": "Malware payload (Mirai)", "value": "80c70ead7b9f56dec816ebfbd5cb7b354b93d4c2", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890381, "uuid": "1ac603c4-5b91-47b0-b6a8-de3509c76270", "comment": "Malware payload (Mirai)", "value": "e96ed9b594ef5f90a87de1ef385cc91b639c4111804843ad627b5cf5a1695276b511cdae8ffec22e29e6793ed78d7451", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890381, "uuid": "09727036-b51a-43de-a22a-38ce1c378efa", "value": "T1CA733946FC818A12D5C5137AFA2E118E3313677CE3DE72129D206F2477CA96B0E7B916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890381, "uuid": "cb83955a-3394-4729-a33b-4c5bde5a13bc", "value": "1536:JpnH/Z2lcHDOaE3XT4PliuEfSyRprtsMaUKShmn3M1iXXTlXt5PYt:P6BhkPjSltsMaUjeXRXtxS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688890381, "uuid": "831f5a87-cdc9-4e62-a478-6cc9550ab34f", "value": 79084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688890381, "uuid": "249a30ac-aa80-4b1e-82fb-6af0acd35b40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890381, "uuid": "167da5bd-daaf-491d-9b9d-861e738ae691", "value": "arm6-20230709-0812", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fbc87d2-1ea3-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688939806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939806, "uuid": "cfc341f4-56cf-4afe-a198-6c9f5f559167", "comment": "Malware payload", "value": "de2a8e8a25a92d1f99dfe19709186913", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939806, "uuid": "1cec9337-56f5-4e07-9122-962a82c5f8c0", "comment": "Malware payload", "value": "6b523891d01caaf5b843e9e2bbc51252f12bbab6d6480a5b6ec1a3fa32cfa8c8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939806, "uuid": "ffa44555-4da7-4ed5-ae25-d42d3c0712ca", "comment": "Malware payload", "value": "6c7d7ff6052184c0efae85fb3b829d29906f3535", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939806, "uuid": "e1aed21f-cddf-412d-93d4-180577437a91", "comment": "Malware payload", "value": "331ab305fb7324ac001bc7e364ddbe46d83448dfdf8d13c398558ad483c153e255ae306bb71869d8cf64336186e19692", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939806, "uuid": "f8219368-5483-4c4f-bcb0-e14bf0716da4", "value": "T170359F713DC38272FDE660B506ECBD6646ADE0B00B2685DF96C457EFC720AC13A39586", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939806, "uuid": "ab36abc3-5ba6-46e7-9606-1b3c36e8f6c6", "value": "2e7f2667392d8d1bd01896145ab96743", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939806, "uuid": "34375b84-eb82-40b1-a83a-6e0813eb5421", "value": "24576:30nid6uv1xs2YU/YohC9ns6Y/Xj1xRZNDj:5v1xs25EPY/Xj1jDj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688939806, "uuid": "270ae68b-4bc4-496b-a9c2-8a74d4214ec0", "value": 1088000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688939806, "uuid": "21b50bd2-9649-4425-a7e3-b9e674669e00", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939806, "uuid": "f13fb34e-f47b-4421-ae71-f749dbbeb367", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff79a80a-1e3e-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896641, "uuid": "f913fd63-caf7-480b-9f64-90f876c10a4c", "comment": "Malware payload (Mirai)", "value": "1ec78fa1fba83fd3f89dfb1c5615291f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896641, "uuid": "8c21f800-1852-4666-aaf0-8ff05943ae9a", "comment": "Malware payload (Mirai)", "value": "6c4362e8786413927b7742fbe41de0f9738e21eaf4966e09969cacf2066476aa", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896641, "uuid": "5eb051de-e2c7-481d-89ee-b2574b7d4639", "comment": "Malware payload (Mirai)", "value": "88820443bc010332387094ffdbbfed90df03d58f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896641, "uuid": "caad79cf-8944-4005-89f7-8bdb726acbc8", "comment": "Malware payload (Mirai)", "value": "97a6d99e9fbb763e81a1fa5206fa586698e06cee69e88b5e775a435efe37070f0f8eeabcad17bd1291adfe2b216c1027", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896641, "uuid": "3d10914b-465b-4168-83f5-f1d4320a7cdb", "value": "T1FDF2F1E5113C9E31C3F4DE7790A3239D2797AFF981F2356A918541B8EBD120A66BC243", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896641, "uuid": "4b474a9b-7267-4f9d-ab79-7efbeb0429de", "value": "768:LC8K9uXioz5TRyV3q3ZVhUv0ZUT3omDXF/7T+HYjss+OMs3Uoz+:E7oz5TQV63ZVyv0Z1UXRSYjsLOJz+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896641, "uuid": "7ed948ea-35c7-4498-823f-bed220a4e22b", "value": 37532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896641, "uuid": "f523a7fb-966b-49f3-af3b-d746851b7f9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896641, "uuid": "94bb329d-f922-44ef-8122-db2554f277d7", "value": "1ec78fa1fba83fd3f89dfb1c5615291f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21d85a57-1e57-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688907007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907007, "uuid": "da8b31ee-2bb1-4359-928f-0e1825d09a3f", "comment": "Malware payload", "value": "eeca0ceba6c2f022d54bb7be442e2305", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907007, "uuid": "ba39cc6a-c553-4e60-a9bc-664f172a66bd", "comment": "Malware payload", "value": "6ca4e48ef488b293d63a056bbdc0ff6f95644162ee9325ffade2343c19ca8a44", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907007, "uuid": "0c80abc7-0a9b-4f21-bea8-ecc7d5d4f1a5", "comment": "Malware payload", "value": "1fc633415cdfd04161b0595a577ec7c9bf94f09c", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907007, "uuid": "c50d2314-afcb-4c9e-b0f0-5d791e0c5718", "comment": "Malware payload", "value": "543d041a0168a710a20a001cf9b1870996b58cb3f194e24083c8cce73fc81958172be82806bfc7ddc56ec6bb9a50aa63", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907007, "uuid": "4af773e9-5d77-45f9-a0fb-49c189d5f931", "value": "T1E6C2D030A6AE2CB1C6500536FAB866C5BE530F7DF9FE3890114047BB39429496ADE9C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907007, "uuid": "f9ab3aca-4f12-45de-984e-bd5f8f601010", "value": "384:ARt/koxisa34beDtZwuaCBsk+G9lLSsLYSTFs9u8OtqlrNEQRKQbhymdGUop5h8:A7soTAZ3alkXLvFh8nNEyKQbs3UozC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907007, "uuid": "c09de410-3386-425e-8c97-a3248308a019", "value": 28176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907007, "uuid": "bdd6f851-24e0-47c8-bc4b-08eb8d314101", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907007, "uuid": "7543ebf8-94d5-4307-a2b0-a39d3d6b0e4f", "value": "sora.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07487be7-1e97-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688934450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688934450, "uuid": "17a194dd-c314-40d2-b395-f5af49d170f8", "comment": "Malware payload (Mirai)", "value": "ad34ba02b13b1f61d3d276eeac761bdb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688934450, "uuid": "25b71885-90c3-4c71-bf54-2eeeb35756b4", "comment": "Malware payload (Mirai)", "value": "6d7f56d5841b23250ae29b4ce404785277ff4426c8718fff57d32e4d597b7681", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688934450, "uuid": "fb38a3b6-1a8e-4e1d-ab80-fa29694e7550", "comment": "Malware payload (Mirai)", "value": "ecc0b4469976fca3c8bdd4b1c3833f7df3868e19", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688934450, "uuid": "82139369-e3c0-46f5-9e1f-b842c74f6f3e", "comment": "Malware payload (Mirai)", "value": "cd868ecf923ad221c631f44556d44137d83daed48faede68905d94553b4da6eb2e7cada49c2d88a8f8d14284736459bb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688934450, "uuid": "456d7878-98d1-46d4-a82b-85ca6478d2e8", "value": "T1F3E2E1961B15C8FBE53054B7B8A401C776799BB829FE2013421257CEDEC298707F29DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688934450, "uuid": "2030a52d-3836-4020-8408-9ea6114574a5", "value": "384:gvRJEzTkHk89Sws2W2ez1QIxz9bCUEJ/HLc6B1/eL+ckOuaAaqFm1eAApOUh7qmD:SEKkUgXzj4B1YkOTtcAAgU9q3UELd2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688934450, "uuid": "99cd7fc1-4ee3-4c93-a37d-576241fcc797", "value": 31872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688934450, "uuid": "b8a2902d-5b98-456c-9637-7145a90ef366", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688934450, "uuid": "52c9857f-96a8-4f99-8108-9602bb2593b5", "value": "SecuriteInfo.com.Trojan.Linux.Mirai.1.9390.13115", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13db298f-1e29-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688887227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688887227, "uuid": "c39bd76f-a987-40eb-9eb7-a84fbf31a74d", "comment": "Malware payload", "value": "0f7e95a87ed16d1efe34d2d9d25ba67f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688887227, "uuid": "8ace2190-b3fd-4b18-b216-74101b81b528", "comment": "Malware payload", "value": "6f6dde42f7c995db58b0f318664243785c33809d7bc9925bb29cc039cd148b29", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688887227, "uuid": "f77c4eff-53dc-49f8-a193-924856a74098", "comment": "Malware payload", "value": "6ae5f5f65f3a0c9b231a053aeab4dbf2320deb29", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688887227, "uuid": "1ee542dc-307e-4b34-bf24-1f5f42878e3b", "comment": "Malware payload", "value": "0a8e36aed32943fa2964b3800b5ad4d5c78b4360dfd82e18f05cfba88ae55916f6e67af60af21bcb4b384fae2a9ec342", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688887227, "uuid": "5d433dfa-751e-497b-8b20-a0eaa31e5f3e", "value": "T1FE671221364AC53BD67A05B01A3CDBAF516D7FA20BB154CB73CC2D2E4AB45C21636E27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688887227, "uuid": "80daf8f9-938c-44d0-8033-fe79818a81ad", "value": "d23703a6f12b30c40e0b3bc256b113cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688887227, "uuid": "efbcbaba-d928-420f-b98a-31fdc407c35e", "value": "786432:SLebpnquP/WSHbIZOklnnx2S8iaNCvDnOpwQcd:SKbp17sPlnxmnkDnhN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688887227, "uuid": "f92f7b33-ffca-46c1-9ee2-f4ed96b59f18", "value": 30697933, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688887227, "uuid": "2dd062f0-b443-4a50-91aa-ef43dd141a8c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688887227, "uuid": "b675f903-2555-4545-91f8-e3e5036ebfed", "value": "0f7e95a87ed16d1efe34d2d9d25ba67f.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75257620-1e10-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688876652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876652, "uuid": "cf7de299-55a0-49e1-814c-2cc5dd25e7f8", "comment": "Malware payload (Mirai)", "value": "68adb16b3fe2af579edf355c7f3d8602", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876652, "uuid": "264017a4-d598-44e5-9d76-41933423e1db", "comment": "Malware payload (Mirai)", "value": "6f94bd324e4bdfb2a9986a3b973dcf188595d66fbc12ec743d91459cb923fb50", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876652, "uuid": "5f0bd6c0-3d71-4053-a930-e38f17df7c32", "comment": "Malware payload (Mirai)", "value": "271573e25b8fd2ee0d1050c49df10e9cdb107e84", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688876652, "uuid": "3bd49408-49aa-4fe7-8e68-b7dbd7cb03b0", "comment": "Malware payload (Mirai)", "value": "f9af99e2d5955923e61d0b5127a9be249c4cfcdd785ba4d8f9a8c4cdbf5855327b4599ad44424ce807063735ec14be89", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876652, "uuid": "710ee821-6daa-414f-a6f7-291088ec816e", "value": "T182F2E140CB8C76B2EDD26C3AC6A5C5492B3D7D94F48DB2785B30D634A9CA03B9B6D441", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876652, "uuid": "c8a3c536-1054-4e55-b679-7834042c6292", "value": "768:lFnrSSRayBRghd/kBGhxnrZaxhVqrAuT9T7ZXuAerCKU23UtN:3rSfyrghu+xnpNT17xu1JU5N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688876652, "uuid": "ccfbe139-81ac-40b7-ab3e-cac3881d9ec2", "value": 36288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688876652, "uuid": "13d67e4a-e15f-4986-95e7-9ec65d3a111f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688876652, "uuid": "c38b9e7d-8354-4854-8cac-836033ba5198", "value": "arm.nn-20230709-0424", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ec49503-1e3f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896694, "uuid": "32d044c2-a0ba-4c7c-987a-901f96a93080", "comment": "Malware payload (Mirai)", "value": "b628fe228b091026bef32ec5b2ce65c9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896694, "uuid": "e78e1d91-1a18-4cda-8e5f-69c3fecaf49d", "comment": "Malware payload (Mirai)", "value": "744cf4029f3bf79a1bcc7d3ff8bb35c6179c448d67411853333c46234e05a5cf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896694, "uuid": "a30b98ac-3658-4b24-a390-0c4972bdeb88", "comment": "Malware payload (Mirai)", "value": "deb32928bee404413e8e6bddcaafb29ded3c86bd", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896694, "uuid": "7212d339-f330-4575-8dfb-4939a79e6e1d", "comment": "Malware payload (Mirai)", "value": "3054feb01c60f17d3e3c58f813770b16af9b0ff85f4387c4911bfcc9498c84c44ad303ac64c9d00a5a2e8c56389e0094", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896694, "uuid": "73ef8ec7-1c59-43c4-863f-245c4a9bbdca", "value": "T1A5130217A6E2C437E9A9B5B5C0ED5213BE2CBE3CD08EF2020541D778329ED869B5D05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896694, "uuid": "a9a88757-cc42-482a-8c55-ca4ab8a94f3c", "value": "768:QCAxCF0WgpVi+e4EpThfLjFGiw0zERuaiS3jlCTNxqAx75y9q3UELCH:QCAASpoFFLjQihQckQT2Q5nLA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896694, "uuid": "8083905b-d968-4a64-a2b5-a2359174258a", "value": 42340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896694, "uuid": "21fc943c-2f44-45df-931b-68b843345bbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896694, "uuid": "f736dfde-6151-423e-8d2b-6dd729a433e5", "value": "b628fe228b091026bef32ec5b2ce65c9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eba4b3fe-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898756, "uuid": "96366c8c-0e91-42e3-ad6f-8cb66d1ffd08", "comment": "Malware payload", "value": "7698205c0d42b720276a89650c379bf6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898756, "uuid": "5f1e62f4-f116-489f-9133-ff116b706503", "comment": "Malware payload", "value": "750f11447c7a29d492f6d5c5d247f82e36338a0552990757f9e29b06afc45f4e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898756, "uuid": "fe3167d7-f06b-432e-9b05-0eb295787419", "comment": "Malware payload", "value": "8e02ce8ab7f3ae81d5aee1a15b035e706253c374", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898756, "uuid": "84de3f69-68b3-4a90-a971-f29f5f78fcb9", "comment": "Malware payload", "value": "94e3e82175c324e05c55aa92877c3cf8f465c07c2507250dd8416ef39f00bd675f7b7e5a7d4165cbce984bc4497d6ee7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898756, "uuid": "2a75294a-00dd-4a13-a693-5559d75e8da6", "value": "T14051A8DA7238DB63CAE6063B87465C95355C301007FA49BBE83C91DB64D65584B09E28", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898756, "uuid": "6f0a971b-941e-48ef-b6a0-f499bae82a67", "value": "87bed5a7cba00c7e1f4015f1bdae2183", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898756, "uuid": "6ee57f78-591d-4642-837a-955e0a134522", "value": "48:OEP7oxQxvt+Y8FnTSen/TY8JIJsIEn+BsGNwG:nP77xl+ZnRysi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898756, "uuid": "ca2c58ad-de7a-4868-ac5e-9f080e953351", "value": 2659, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898756, "uuid": "1c062ac9-14e2-4735-819e-223d119c7955", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898756, "uuid": "1f7e668a-2c04-4997-b5d7-f760dcc65b18", "value": "SecuriteInfo.com.HEUR.2857.29073", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcfbaa75-1ea2-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688939479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939479, "uuid": "e05d6e2d-21b1-483f-ad7a-bbc6006fb868", "comment": "Malware payload", "value": "ba2e5a5c2c905f7ee43b16c0098caa83", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939479, "uuid": "ae1b8aba-94b2-4eef-acf9-4abcfa7f9ce8", "comment": "Malware payload", "value": "789a59f4302507e7f2ffac7eb0beaadb492f4f8066f789473257324f92ebfca4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939479, "uuid": "783d4c0b-359d-4001-a82a-f7c18215d8bc", "comment": "Malware payload", "value": "1880fcb10599077af2f2b0f0e08710079eadd657", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939479, "uuid": "2a0c7539-c0a3-4844-b29a-3fb852469c7f", "comment": "Malware payload", "value": "94fc51574232c68762a9055b67f8f8e2d585c2fae4f5f739886dcbfb875b81a29585932b072e884fb920f5f554cedd16", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939479, "uuid": "b3f51d07-c30e-4d95-8791-5a329880076e", "value": "T16464D11372E0AC64E5625E324E3BC6E4261EFD919F5827DB321C7A2F1A701B1C672B53", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939479, "uuid": "beadc9c7-be45-425f-8da0-6e5feced8017", "value": "9fe7c63c8897d818b6dd51c58fde91ca", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939479, "uuid": "97c90489-43b5-41fc-ae3f-b4b19243e49d", "value": "3072:qtVQRN2oKXtLiDxrpL1xneZMq83UbK0Fu0IXjOKgfyBDA6EUvsVtcuq62KK6g6Jq:HAXMBpXn53oP4jTRDmUv+q0A6uib", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688939479, "uuid": "6dc21e62-9340-498c-95bf-17cf76e95468", "value": 333824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688939479, "uuid": "339964be-099f-4061-96d6-2ea19c3ca2c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939479, "uuid": "ecf88882-7fa7-499e-bcf0-bd7f14afa5c9", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "697a1b94-1e30-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688890377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890377, "uuid": "dc61f546-86aa-4f2d-9137-9ace11d609f6", "comment": "Malware payload (Mirai)", "value": "34ccfe87eca88b1c1e3c32030ee7ecf4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890377, "uuid": "d8dc0dc3-9061-42f1-aec5-0b5f6f3e34e3", "comment": "Malware payload (Mirai)", "value": "799d207b728c3ce48b6eea4704ce453d0e73d6c9fb359a75dcf7937a29271f89", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890377, "uuid": "4af185d5-5849-49fe-b08d-294470b1a447", "comment": "Malware payload (Mirai)", "value": "1ffb4b843016629fd734afc9add6313672a56e9c", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890377, "uuid": "63012925-bd27-4921-8006-6014c7e7849a", "comment": "Malware payload (Mirai)", "value": "b8ec2252480f5ca2c4a65f57742debd161f8b996e3cbc07ad56191f404eb49afbb17509637cf580af5abe3509d1ac76e", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890377, "uuid": "65e21cf3-864e-4b91-b14c-c27026306ff5", "value": "T10C532A17A58080FCC59EC27447BB763AD53335BE0239F2AA67C8FE272D85E601E5D885", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890377, "uuid": "77187fad-6448-4881-9dd0-c632d326ff27", "value": "1536:1zz67Xlb4NfZb81jY3Nn5y+Ion3Za6QApbFH3EJ:Nz67lb+fR2E3NnssZa6ZFH3EJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688890377, "uuid": "cda442cd-5517-4fb9-9395-139bcd29e3ad", "value": 63328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688890377, "uuid": "1893cccc-d933-40ac-bdc3-83eb8ed48358", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890377, "uuid": "f58c9e24-3fa8-4bb9-9281-f47d5c1d962f", "value": "x86_64-20230709-0812", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b8f225d-1e92-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688932498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932498, "uuid": "84c01da2-5619-41d6-a4b4-15ca9acc9121", "comment": "Malware payload (Mirai)", "value": "9241bb62e8173dc7c0dfaef599376a9b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932498, "uuid": "88184676-ccb6-48be-95cd-732e5c05b491", "comment": "Malware payload (Mirai)", "value": "7ae68a0d4f95dfa2783764ce35ad5efcf03a91d4edffb465855f677277cc18e6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932498, "uuid": "b72b28ce-83c1-406f-b492-bd0c5de50875", "comment": "Malware payload (Mirai)", "value": "a44050f26d631a23ac72480862c02923a29fcae6", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688932498, "uuid": "1a099bb1-8e93-4e76-b71e-45230d1ac5bd", "comment": "Malware payload (Mirai)", "value": "2d12f2b65a2bf201e1918727ff9beb950f14dd10cbfb9c1690d0d1727dae8b9f5a82c02ee2145e6aae48b3cb10f9f9da", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932498, "uuid": "33f764d8-0866-4e27-8a69-3112463e61ae", "value": "T1425302E6C0DBF271EB56D87AED3345A06C06893A547FA7FB4244054A7FE20806AF86D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932498, "uuid": "8824ae4d-e4a0-445b-a559-4b18c34240d2", "value": "1536:V6DfxifyENHBWA055iWOte9U+mCzT8ZCYor3:VEpETWct6UMg83", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688932498, "uuid": "72a924bc-3d74-4724-9d4f-3ad346fdc704", "value": 61812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688932498, "uuid": "87d48ac0-bc5b-465e-b819-b4818a1c17c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688932498, "uuid": "3124740c-74d4-4542-ac36-19de430b4788", "value": "arm7.nn-20230709-1954", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ad465f4-1e3f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896687, "uuid": "5899a691-a8cc-4105-94c7-4211ab941a9f", "comment": "Malware payload (Mirai)", "value": "a2a426c3680d0ed0c7fdea9eb6423968", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896687, "uuid": "19e576bc-b9fb-4630-ab5c-09efdd594ad0", "comment": "Malware payload (Mirai)", "value": "7aec0aedf756e66b46e3318f4f005fa51018fcdfff2edc0abf4a5781982e39f2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896687, "uuid": "1759c016-7916-4aec-8da7-6a92dfefd3f6", "comment": "Malware payload (Mirai)", "value": "c7e863483d55bf88e865ef39d8749841e13e3d96", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896687, "uuid": "eacd3ec1-67ea-45e0-b327-cf69612da51e", "comment": "Malware payload (Mirai)", "value": "f02187192c90766259d2e986855a1e6821222b9ec3bda52deb9a0e9666a69facb1af2c7a1b823aceb98d792011ec449a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896687, "uuid": "33ccd8c0-7134-41a6-a7b7-84046fa90c2a", "value": "T1E75302B1FB6CEC26DB645938E56F408B15874770D6FEB566446A4B1870F348AA04E30F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896687, "uuid": "5c747170-1fbc-4843-a485-f3fca70a9c26", "value": "1536:rMiy/8DkkQ9HG955fL+SbVqdXxcGihjDr:QK4S55fLvoUGihPr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896687, "uuid": "face9d35-c188-487e-8481-3e6ea5bf68de", "value": 62056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896687, "uuid": "9fc2f22e-e196-40bf-afc1-6297df2bf396", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896687, "uuid": "6a9b1d24-562c-4327-b532-cb316eb35fe8", "value": "a2a426c3680d0ed0c7fdea9eb6423968", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73b57e57-1e20-11ee-b3cf-42010a9c0076", "comment": "Malware payload (SnakeKeylogger)", "timestamp": 1688883522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883522, "uuid": "2a76cafa-666d-4dbc-92f5-70fb53f56877", "comment": "Malware payload (SnakeKeylogger)", "value": "cdb65de8be81b1fed45a72b8a1bba99c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883522, "uuid": "4f0b7a24-14f4-4916-bac3-595637a93ae1", "comment": "Malware payload (SnakeKeylogger)", "value": "7dd87045b01664baae6b15de3d058e1c93b40d2125b5c1448c2fb4bd2d59100c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883522, "uuid": "c6b4bf51-4b68-4913-ba8e-1e5cf30d921b", "comment": "Malware payload (SnakeKeylogger)", "value": "2aadc486f9f9031e3328fe63f7b84a1dace79ebe", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883522, "uuid": "0e5cc3e9-472f-4248-b2bc-5853884e97ff", "comment": "Malware payload (SnakeKeylogger)", "value": "b35709361ad6849bf1fe088f72ce5fafed1dceb4b0475301023614dceca601fe105bde346e26398ec2f67e127862cf57", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883522, "uuid": "68823e77-a764-4546-8d57-c41c5e05c167", "value": "T1BAC4583D1CBE2A37C174DAA98FE58463F950C43F3922993664D787958706EA325C323E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883522, "uuid": "b0deffd5-310a-42f2-a3eb-9380ce67c6c2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883522, "uuid": "94c6a062-50a4-4a09-9fba-8afa68898516", "value": "6144:ElnLeaoI6wPCTGry3/F7HO7erZIezG3J6CJP3QJRLcIQu+7UAAGCVTd3rWcRm:euiCT8y3pFo3/93QXorLX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688883522, "uuid": "b2cc56fa-617f-49a1-a45e-bff0fb77577b", "value": 547328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688883522, "uuid": "d41f8715-ad65-4f61-9b03-deb174a42eb5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883522, "uuid": "101d3584-dc4c-4d6d-91db-01904073a673", "value": "cdb65de8be81b1fed45a72b8a1bba99c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5624513-1e52-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905187, "uuid": "7c6ef0b3-d266-460a-8592-b3e9153661ee", "comment": "Malware payload", "value": "0fe33323d9715f282916d73089ae1c64", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905187, "uuid": "e03fdb9d-99f5-4126-b1f5-738d712555d3", "comment": "Malware payload", "value": "7ea3b78dc80489edaa31cf43cf28c60e5ddaa66f72f18c2356908797b8c7d071", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905187, "uuid": "b9d40bce-6854-4540-9998-372bda45929c", "comment": "Malware payload", "value": "dbfb18b7d135a2407c7685024f30712980901385", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905187, "uuid": "f7f58058-671f-457a-b9ad-85634631c748", "comment": "Malware payload", "value": "87ce15ccbf0f4514cbb15cb52a7046fefa206f0b0e8703c76181912559db7b66b67f72f119980d08fdaf5216cf76fb9f", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905187, "uuid": "11152c13-d15b-4f3e-b129-359438858aa2", "value": "T1B1D308C299537D37C2C29BB6FA9FD10937E39B14939B3301A5986FF04B4B9C90D1921A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905187, "uuid": "cfa98e2b-7598-4b3f-91a4-234641740851", "value": "1536:w5nejTYN8EUaQmiAMvxp5aPziFTRHd2inpGpX+Xi5jY0WC7/WVEbDK6HTImy:bTYNiDXZbaUpGpX+XipbWCf7zfy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905187, "uuid": "1640d573-8a11-494b-b91d-38be3a2f48ec", "value": 130407, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905187, "uuid": "79862467-a753-4c6a-9ecb-49605d8bf21e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905187, "uuid": "86d2db52-9341-4c87-860d-e2678898105f", "value": "armv6l-20230709-1219", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fccd0df3-1ea1-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688939157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939157, "uuid": "9d31bea2-e4c1-4ba9-8ac9-ed1ab0bfc6cc", "comment": "Malware payload", "value": "fcba40e936b2aaf235463d2cf489d6fa", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939157, "uuid": "749b61d9-ace1-4757-ac3e-a61fcb4a057e", "comment": "Malware payload", "value": "7f60792dd91103fcb9514c84383cc0d9150142a34c21d18ac823f63ccab83318", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939157, "uuid": "303880ca-05c9-4b0d-92a4-7b9021fdf2dd", "comment": "Malware payload", "value": "86741a849ad5030e36459920a88a0cfc8dabfdda", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939157, "uuid": "99c1105f-808b-4851-830b-4d4775dcc6a9", "comment": "Malware payload", "value": "e050c76d5fe57eb842805e60c827cc9242b2a99246e71fca9977070dc1ceee147ab719a4fbca5793f96b0d8e614a9f05", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939157, "uuid": "981703e7-91fa-4956-a022-2e1e3b3dfe00", "value": "T1650502B175C1E460FA603E31ADF089199A6DF5162B205FCFD6085B376F357C0E0E1AAA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939157, "uuid": "5a57d76d-aeb1-4a12-aeee-017e35a6fe95", "value": "a28cc61d7bee0de0286514194675f409", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939157, "uuid": "37919f0f-24aa-4146-8a54-e46a92ea80f6", "value": "12288:hc5E3b5wt4I9WQBS/h3AD041gpQpRez6BeOiw+R6tM36OUeppyZiQ4R4gB4tcRC:UEp/hwD9TpRez6BRilRUOBp4ZS+wC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688939157, "uuid": "45bf0aac-d7d1-44a0-8a30-3fcf745f52ab", "value": 825504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688939157, "uuid": "e11403a9-da69-45c1-9f0f-408e10c349a8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939157, "uuid": "a6489036-d38e-41c2-8dd9-0ca626c57cb2", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e92777cb-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898751, "uuid": "3447fd3d-b201-4c42-ab1a-495c8879c5a6", "comment": "Malware payload", "value": "efcf37a1d1a3316d8b69955d2e8088d6", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898751, "uuid": "5b75b859-7f5d-43df-85cc-e8cb9537d5e1", "comment": "Malware payload", "value": "813459d87bf76c4c1162f8a5ae9281cf68bfa667de09798dcef97f31235fc890", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898751, "uuid": "57e7f401-3ac9-4b55-967e-1377031e1742", "comment": "Malware payload", "value": "5b5261f487c2c54220a454297c163246c1fa4c58", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898751, "uuid": "a3f715c3-c921-48a8-9d98-0b44ee8c61a3", "comment": "Malware payload", "value": "2dcbcea1bfe8bcbca613368b941cf1df7a9b6b4454f048d5ca474bf647a8b45789dffb1c4a74f5fabb0caa4c8d51e4a9", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898751, "uuid": "20ff0198-ac9b-400b-a9ad-1b30babd2f40", "value": "T1E1F433F0939B8D33C42C6CB6947D68BB609382A5DB49F40D1790DAEEC4D8F5E162067E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898751, "uuid": "006b7b6f-895d-425f-820d-665fcb11cda1", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898751, "uuid": "b7aa0364-0df5-4dd6-9f3a-7ce4b62ed88a", "value": "24576:0/7/SfyU+BmVkbxENDetsMSYtcHNT66S/:nfyskbxPHSBHN26S/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898751, "uuid": "fbcf1f63-fe6c-4078-b276-9f8191087100", "value": 790032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898751, "uuid": "ff9ddb3d-9d3e-4c0f-8446-57f460a8dc8a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898751, "uuid": "afe341cc-f1c2-422d-9f31-f4fcd304b03e", "value": "SecuriteInfo.com.HEUR.29435.4103", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e91f0cf3-1e52-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905194, "uuid": "6e2b4e89-16bb-4ab5-a0f6-95a67114f276", "comment": "Malware payload", "value": "143eb01ba8ba7b003d2ccd384f93720f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905194, "uuid": "4804deef-46d0-45dd-9119-b7e5eae5759c", "comment": "Malware payload", "value": "813e46feff142d34c36004927ecb3bdcb15fc38d228b8bce1ec45ae11a5229a5", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905194, "uuid": "2eb9070c-4573-4445-98dd-964659e9c77c", "comment": "Malware payload", "value": "b3d13c044ad4176a773095e6de70722e3337b7d6", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905194, "uuid": "b97984ef-579f-4ea1-afac-0f932ef938b1", "comment": "Malware payload", "value": "f28027f6d629047032cce2cb638367b41dd76e26eba050b583b00700d18595fbdce3ef17b82ae5184aefde015be02875", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905194, "uuid": "47b7ec15-71c2-4bff-bc65-c7a32427d91e", "value": "T1E5A3F8C1E9437DF7D5C3DAF892ABE32859F3A8154B2A4644FBD8DDA1C51B9883009358", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905194, "uuid": "1e7e9f24-f69a-4d1e-840e-fd49d46fb4f5", "value": "3072:f2H/9uNvdLqrOVmzHJRZ5sFWF+UmtYm1LwlWp9/Nq7u:+H/s5I1p3Dm1LwlWp9/Nq7u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905194, "uuid": "5bd46bb7-852d-42bc-aae5-a8fa20c07d6e", "value": 99619, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905194, "uuid": "7cc23892-4d5d-4ac1-b6d6-d2091613a2dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905194, "uuid": "c2093f89-26e0-4759-8e66-def5291a78e1", "value": "i686-20230709-1219", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1a663de-1e7c-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Arechclient2)", "timestamp": 1688923220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688923220, "uuid": "5a1e75e0-1240-472f-9186-0b9790f25796", "comment": "Malware payload (Arechclient2)", "value": "32c80a0cc80ccef6766137397d43e429", "object_relation": "md5", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688923220, "uuid": "d91a865d-905a-4331-ba88-e1722e65602c", "comment": "Malware payload (Arechclient2)", "value": "826e2d460e7da76b3828bc8f015bffe558a30dba4ee1253e81b4a1edfb835522", "object_relation": "sha256", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688923220, "uuid": "282ee09d-5fee-4f4d-a928-a0ec2c213589", "comment": "Malware payload (Arechclient2)", "value": "abb0536dfe67091c98a54f13a70c22bef02375aa", "object_relation": "sha1", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688923220, "uuid": "abdaceba-eb65-4570-9adb-34278f7dc36c", "comment": "Malware payload (Arechclient2)", "value": "b5949de8666640dacfd5a469d1e9ae0266e28d6f741731d050979a0501e0f02b8749a5a563d0ca040931ebf2c4c15ae5", "object_relation": "sha3-384", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688923220, "uuid": "f110421d-1859-4475-b403-1bf0100f1c84", "value": "T1CCA417D833479926DEE97774C0FF1D1C86A006A2D651A24F4CC99BD02F9139DE73AA83", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688923220, "uuid": "5aafce27-1cfc-4951-866b-2d77f11afe24", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688923220, "uuid": "cea6d695-1dde-45e4-9b56-6e6a98f566cb", "value": "6144:AyNusrH7I/azX8jTd2rYbNG/pWGwrjrQeX00AKilu4MYex+yFFdDcXlz34Jy3QdJ:Aycq2YsjTHQZwrXQBvKY0++cXlzdOsG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688923220, "uuid": "e0b87728-67aa-4811-af7b-19c3da0e6940", "value": 481792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688923220, "uuid": "175492f9-3ff2-4648-a0ef-9c0a5c7d059c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688923220, "uuid": "07fd11a4-010f-445c-a272-03bd29b4c290", "value": "32c80a0cc80ccef6766137397d43e429.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1c86227-1e3e-11ee-b3cf-42010a9c0076", "comment": "Malware payload (DCRat)", "timestamp": 1688896538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896538, "uuid": "acfcce64-4dba-47e3-8419-d15bc288405e", "comment": "Malware payload (DCRat)", "value": "06de145d1c40d7a63c30684ab628631e", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896538, "uuid": "8eb5238b-df8a-41cf-add3-a50a8f586747", "comment": "Malware payload (DCRat)", "value": "82e31b9bef8bdc34385c82db1239f570fccdb0b96a8f1ae0dcd4fa7abcc9ca25", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896538, "uuid": "bb4bf1b6-f338-4c30-a336-457e6daf900c", "comment": "Malware payload (DCRat)", "value": "578fcca27ee5069c1cff0f46527b75055d565689", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896538, "uuid": "7aaf814e-2ae7-448b-a448-7dad6be8de0a", "comment": "Malware payload (DCRat)", "value": "63d32186a6434b0849771522ebaeb318c810eb4df8409a301f60e57f3bd2a194a08623d61b0ae69b88764c942995a92d", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896538, "uuid": "a7448505-6de0-4c3c-ba56-e12100ae18b5", "value": "T1639523027DC5E9B3E06518322639AB61B57C7D201B698EEFE3D42E5DE8310D1D7363A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896538, "uuid": "eef27d42-b47b-45ac-a6f6-34b3dc1250c9", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896538, "uuid": "e8456071-32e0-415e-b532-2d221a6b8c65", "value": "49152:ABR1ILbpuPkLfbafiRL7fi3tHn0wY8Kb9PWBUCi:aQLbckvafeLota9P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896538, "uuid": "8c9fb720-f120-4e45-8d73-94e6230ba041", "value": 2025287, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896538, "uuid": "98afc77f-3541-4ad6-929f-594b5a43351c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896538, "uuid": "df9c7bfe-6924-44e1-a0ec-382474254099", "value": "06de145d1c40d7a63c30684ab628631e.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72a4276b-1e9c-11ee-b3cf-42010a9c0076", "comment": "Malware payload (NanoCore)", "timestamp": 1688936778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936778, "uuid": "febdbed2-14b1-4e7c-aa3d-f2ecb71e3efe", "comment": "Malware payload (NanoCore)", "value": "5837e073397386a3840a5ae628ea6e12", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936778, "uuid": "4880a144-b1ba-4c28-b683-1029f2bb17a5", "comment": "Malware payload (NanoCore)", "value": "869cd7f26620b1f07049575e33ab2aeacd1810ce0fd77a79f16be579dedf0de5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936778, "uuid": "e6efca76-6712-4009-a433-77f0b8c089e3", "comment": "Malware payload (NanoCore)", "value": "34c99d325919560c91a9012bb09067f903c88639", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936778, "uuid": "6e9efe51-6001-42cb-a0a1-79420d4d4e34", "comment": "Malware payload (NanoCore)", "value": "97ecdecc1d5dd86f73a7586de5e8ece363ed00192c16f4b5b0b97b52c36c6bac0893fa266912bde769a73ff5cba8fda4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936778, "uuid": "278380d8-e6e5-41ba-b87f-da2ffc81204c", "value": "T1F2056C9D3622B5DFC557CD77CAA82C64EA2024B7931FD203902705EC9A0DA97EF161E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936778, "uuid": "8d125f8d-1e3d-4386-b5b0-fadab66d5a26", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936778, "uuid": "047310ef-c5ec-4ead-8045-dab8d88ca63e", "value": "12288:bdDGobmOHhhJnKdXEA5RUbH18PgpzXKWnDUbCRxnXeBEjwuCKu6aL//og5fwMO2i:bdnHhhJnW3RURXKWDWCRx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688936778, "uuid": "10473014-0f9d-4f4e-a21c-0bc17b11dc84", "value": 842752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688936778, "uuid": "3f00b150-45a5-4ff3-a71a-e114fa17142b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936778, "uuid": "4036ce17-e43b-41ca-a05a-1148d96b4ce4", "value": "5837e073397386a3840a5ae628ea6e12", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb0f1785-1e3e-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896634, "uuid": "bae36498-9fda-4f24-8edd-39eca0853cc7", "comment": "Malware payload (Mirai)", "value": "f8fb056f9d93405a21fe1ab8b8ebf110", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896634, "uuid": "f9784c8b-571a-4c5e-8f49-85c2bf705491", "comment": "Malware payload (Mirai)", "value": "88cb9e379aa32315720ac1b33337182932918ee40b3056194ae3e350230fe940", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896634, "uuid": "7f5baa75-6d70-452c-b822-d1ac0a0d7d57", "comment": "Malware payload (Mirai)", "value": "dd53713a7dfb1a731cb0a8a289e622e753d4083f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896634, "uuid": "88754845-4a46-4ba8-abb0-06685a9c4e74", "comment": "Malware payload (Mirai)", "value": "41614d2b18f49a877ba4ce5a5cbd80bfb8a440d8f3db846abf3cf63784bbe0820271f8f9ae0e7e2ae4632b8514f722d3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896634, "uuid": "fa6d09b9-c739-4843-b482-aeca0bf4ac67", "value": "T1CC236CC1A543DDF8DC1105F12173EBB79BBAF07A6029EDD7D7A9A9329801A01E50329E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896634, "uuid": "bcf23870-3c6d-4d61-b46b-70c72d52b3b2", "value": "768:3W8Vw1BBOGSc2Wlo/bvnhwMMPRwEEQZ8nbRWEsYybJminO+YkX4aP:3LV0BOGSc2Wlo/bvhwMMPSCZ8MZYuJm2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896634, "uuid": "3478b2e4-a5d3-463f-83d3-6586221a8065", "value": 45660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896634, "uuid": "79cfed64-d3e5-4804-996a-0e9e5f775fce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896634, "uuid": "8d5891bf-2a09-4e66-badf-eb99d55c4d8c", "value": "f8fb056f9d93405a21fe1ab8b8ebf110", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15343f39-1e5a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688908274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908274, "uuid": "8260658f-68a7-4d8e-9206-ae230d17368a", "comment": "Malware payload (Mirai)", "value": "2c1fe0bdfa102a7894a8f98a2d22bdc6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908274, "uuid": "77c2b756-4960-457b-9979-fe9e01b29f17", "comment": "Malware payload (Mirai)", "value": "8b0799560ad46a6ff3c95f88f312134e9d59f4315ff9d2d3e4ad477978547a8a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908274, "uuid": "6f4fcb30-9c41-4e79-8b2d-cccc02fe455b", "comment": "Malware payload (Mirai)", "value": "a3a55334ed54520019fae30ed533414cd1babac3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908274, "uuid": "aae9fb34-46ce-481a-a517-b5b984d08204", "comment": "Malware payload (Mirai)", "value": "63f1bb428449adda90bf96f334d86aa03796db393c430d8bb3d052ebe5458855dc06682aebedc0caa847cc8d2580a87e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908274, "uuid": "8ef4cc93-0915-4dfe-8f44-731e63fd0d34", "value": "T1CED2D12CD94D7D05CAAD3DB955CE56B52C88B0C0A35DFACE17268418BA27E8BEC071B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908274, "uuid": "65cc3af3-8032-478c-9127-c488f73cbcf7", "value": "768:C1uUtLrVDsAp6tLkF4FuetwEub4sU/M9g36KNG/XJb8WUM:CbDs06t4BEub4sU/MbUG/XAM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688908274, "uuid": "0f700056-5863-4b54-b240-e0cab04d45a5", "value": 30316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688908274, "uuid": "c9616fce-19fc-415f-abad-4846a6f3138c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908274, "uuid": "4d8686f4-3cd9-4916-b64b-432553797636", "value": "2c1fe0bdfa102a7894a8f98a2d22bdc6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4c4d09a-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898744, "uuid": "520ea763-2c9c-45be-a4be-0fdef5e40ba2", "comment": "Malware payload", "value": "4a4e7f539f077ee28d1c17c69f43b1e3", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898744, "uuid": "add1b0ab-8740-420a-b3c3-18d47fef8125", "comment": "Malware payload", "value": "8b8274fe2162e1c8d8504434bb3a07100012b57ceed1e2ac5f76d994271db89f", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898744, "uuid": "c9137d3d-bb53-4f5c-ad1b-53e3fed57474", "comment": "Malware payload", "value": "9ecbfa3224b57ee7f740d356821814ba223a807b", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898744, "uuid": "ee015fc1-f7a0-4345-810d-ec7ab8d961b4", "comment": "Malware payload", "value": "26c8b102fcfc9cd2541e9a2f41d287999e9078c0f0e6cc6316a484def7b7179c2dc894250c772b472dba727989100075", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898744, "uuid": "648b2de3-8cdd-40c4-b565-36c2f8c7b68c", "value": "T1EDA402B51A43CB40F0B70A71988B54F68330FD14685D61E76348F3AF8A3673669EBD86", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898744, "uuid": "d6f0c6b2-c65c-47ca-b656-fb91bb6fc5fe", "value": "d2908bc84d439d79615dcadcce5cfceb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898744, "uuid": "4c0e6039-6565-4b9d-8287-5b21001939a8", "value": "12288:huHQjZuskdXyJ811KpeRrqHD9MuI0o/sD/Vv:EmZBeM9HI0o0D/Vv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898744, "uuid": "712b1da3-779b-4663-adc4-19a9fb510f1f", "value": 480319, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898744, "uuid": "a0385ab9-856f-4489-9474-4d5cef11c7fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898744, "uuid": "09b146ea-f34d-43cb-81cd-65f33196ceab", "value": "SecuriteInfo.com.W32.BDoor.AWQ.tr.bdr.12555.23335", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdb7f3dd-1e3a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688894840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894840, "uuid": "403a1d43-b1af-4a5c-9440-dd2e67a4a290", "comment": "Malware payload", "value": "b1ded25620bde4c3737fbcb9e7096e9d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894840, "uuid": "cda1fdad-6af1-49ff-9e8e-096607357936", "comment": "Malware payload", "value": "8c512cc402ba9424f96350f6fda90107c59449cd7562f9439598d931be10d8ff", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894840, "uuid": "f228185f-dceb-49a7-8289-f9e809269623", "comment": "Malware payload", "value": "15bd36dd0a4bbbed1f9ed6c6d8de6736ec8bb80c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894840, "uuid": "607cc434-046a-414e-bf1b-5837f3b3735c", "comment": "Malware payload", "value": "5fccf073ef4b7da200e37c6993234a864d3ed4245773f852a1433d30246d49d9747e9771583ebe6d92cf1064e2ca2554", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894840, "uuid": "6d643e41-c784-4e67-82a3-6801fce0d5e3", "value": "T18FF52352F382C0B1E9AA01B905618A754E396D3257B6C5F7AFD07D2E8E343D0AB73706", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894840, "uuid": "fb012226-aafd-46e3-b082-a5456e4a55b1", "value": "1ff847646487d56f85778df99ff3728a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894840, "uuid": "4e4cca9c-26bd-4e17-bd2e-0d3f96cec4be", "value": "49152:ON26FOnzGn6LJvqkwnpC+mWd6uIccB9G53WLM7i1rTCTZd0vlQaf:O06FOznLo0+Dd6uxcEmpT19Qaf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688894840, "uuid": "189f1314-df61-47a6-bba5-1dcbda850e8a", "value": 3583246, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688894840, "uuid": "4684fd93-bb1e-4af5-a5d1-91e28e94ac3d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894840, "uuid": "189833f9-524d-49e5-8b34-67e8216783f1", "value": "b1ded25620bde4c3737fbcb9e7096e9d.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16d2b187-1e3f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896680, "uuid": "d9dde71f-af67-4fc5-904f-fb97187993d1", "comment": "Malware payload (Mirai)", "value": "710fed858bcf0c6d4dd218ca54c4268a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896680, "uuid": "ea31d540-50ff-431f-972c-6320e01db20b", "comment": "Malware payload (Mirai)", "value": "8cc1048be834f8370a0c3129486b43da0d94c4de271afe60c1efe3baf764529d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896680, "uuid": "81fae46c-42fd-4817-95c2-0ca279091fd3", "comment": "Malware payload (Mirai)", "value": "f1501ff7636161c45ce00ae035563d5e7873909a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896680, "uuid": "4be8f6cd-0f01-462a-bd10-c348c3a98f77", "comment": "Malware payload (Mirai)", "value": "0b5ab1949634e87fb94cac87d76941da224fbdcfbb307118d1c1334bfbae48bbfa8a07f7758b889d5131fec6ee6d4d0a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896680, "uuid": "f46f2662-6513-4bc5-b96f-7656bd6878b8", "value": "T1BBF2F1194DF657E8D5EE003244AF2B8B8410DEAF6429CEEA6FD0711444DDE6D20ACFDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896680, "uuid": "3749ee7a-f5b0-431d-ba9b-25cf30127e25", "value": "768:us7YuqMIEfFV7XSdhczB73+/fDIYoFunbcuyD7UrQRjH:x7Yc3VOvc973CsUnouy8ryb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896680, "uuid": "1f3f66c7-ac11-4da9-af7a-a9f27f2f2b75", "value": 37328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896680, "uuid": "c477d912-d3d6-4ee7-b791-4f1bcf2285c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896680, "uuid": "423ff59f-c246-4015-9091-934f68d2ae2b", "value": "710fed858bcf0c6d4dd218ca54c4268a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b9dbeb9-1e32-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688891320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891320, "uuid": "5254d960-3fe5-405e-9f16-4e1505af379a", "comment": "Malware payload", "value": "9cc257fc84391b1bf3c6e44876277785", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891320, "uuid": "4c92a524-8fb7-457b-9e76-0488875d30c6", "comment": "Malware payload", "value": "8cc1e0b64ebc839c61a0e4d6edd5b3391350be0de00f5f1d273261ed8301999a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891320, "uuid": "301b6b96-de91-4b25-8560-0ae6cc711564", "comment": "Malware payload", "value": "3b33f244f578ab0ee9dc8926c754f0116c9ffa41", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891320, "uuid": "aa2da337-c382-4e7d-bfa2-2f1f0aae5f2c", "comment": "Malware payload", "value": "24f7d66cfa345c5ec8889fd0817cb5b0ca6f9a6c9927e88ad938f61cba047a53c6ad35d1d53e5eda7cb7bb424bfa324b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891320, "uuid": "c7a11415-1480-44ed-ac7e-aa5b3921c3c9", "value": "T13DF53366CA9A8315C40CA432CEFD965359D7E639C746194ACB27CE13C368FBD3A36348", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891320, "uuid": "a5ca903d-2fa8-47b3-ac61-604ed68f9877", "value": "f72c14d6f41cbb61e10b6fa4e549fd4a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891320, "uuid": "414ae3d0-d3ed-4418-9841-d6c6196f2609", "value": "98304:RAg+x2P+0eYXgetiEQIVOsSqN5egovyuhIN2g7m+d:Rr+x2PZeYQMxOZqN5W6Hr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688891320, "uuid": "b597c8a1-7efb-478f-a4e5-ec6ff558db14", "value": 3341096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688891320, "uuid": "7a39dfc2-4b28-483b-b8c4-c5b3e220f493", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891320, "uuid": "b897947d-9d4e-4183-90b0-c2b61e5271f7", "value": "SourceCode.bin", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13b3299a-1e0a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Gafgyt)", "timestamp": 1688873912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873912, "uuid": "31c40e57-ddba-4af8-b222-d75d0d9a5b8a", "comment": "Malware payload (Gafgyt)", "value": "341e1a4c58cf768a09d4134d796965b0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873912, "uuid": "a61a39f5-f4be-4b6b-8096-3ecc31dd13b9", "comment": "Malware payload (Gafgyt)", "value": "8ceb919ac38f2bf7111517dfea7e5dc13fc15b334b95ece25072aeafaf09829a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873912, "uuid": "d8776788-2ead-4e6e-8b02-9f011bd55803", "comment": "Malware payload (Gafgyt)", "value": "d6bc6ec71a042a9b677085a1cd2856cbd9991425", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873912, "uuid": "0ba4205b-94b8-4d2f-85c5-8fc61330ebf0", "comment": "Malware payload (Gafgyt)", "value": "bc156328608c36eeeb526f1c1900eff1c59c1b4354c0adc73a3b22622deadb916e407afbb4ab4e560cda8dc75ab35051", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873912, "uuid": "5dc79d10-a763-47bc-9526-d44ad5fe0421", "value": "T1C4E35C86EA408A13C4D51777FA9F424A3312D754E3EB73068D285FF43F8AA5E4E63606", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873912, "uuid": "0d1f3001-0533-4558-ba43-c257b93faca8", "value": "3072:gJLD//DFpSgCOJhLlAlIv+Jnh1xuMGv9Ahb/XBM/9hb1K3:gJLD/5RCqlqJnh1x/GKhb/RM/9d1K3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688873912, "uuid": "ae860dfb-b69a-4334-b266-62a9094a0022", "value": 143214, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688873912, "uuid": "86e38bf2-b112-448e-af00-00f54381f459", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873912, "uuid": "32de1c66-d591-4055-80d0-7718b52cca9f", "value": "341e1a4c58cf768a09d4134d796965b0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1c80348-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884056, "uuid": "2232db03-1167-4355-aa01-21c689628890", "comment": "Malware payload", "value": "1d6e21a86d2eb97883c1ce94de9cdb30", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884056, "uuid": "fe4e061a-0fb8-4df2-aa23-31eecaa6fbe8", "comment": "Malware payload", "value": "8e343bd7b8133cc5660fc21e525fb1c077c91625951868e86e33ee16a1ba61a1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884056, "uuid": "2d071bfc-24ff-450f-9630-d3a2f21edad3", "comment": "Malware payload", "value": "dcad2660e0b97feaf9abf9845d1f0b471bb2c66e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884056, "uuid": "e1b18915-e93f-4659-b0b5-fedbd2d49003", "comment": "Malware payload", "value": "dab3d74ee455b8c506441862d8357f8b8680b86be5cfed877b128136b9aa00a050001cd3f5f86351b88b9c76444707a1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884056, "uuid": "e621e344-90be-4498-b6cf-e3562307f83c", "value": "T196138417EA62E462F40A89B12B01D29B685679F130C1FC47BA8D6F19A8753D3E0F471F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884056, "uuid": "24502f6c-dcfd-4cc5-ac9d-3882b51b06d8", "value": "384:MQWrDggqRxvjjTcml6hG1W6C3e5sfg6BM6thEeT1ZiTt6Yc:aPggqRBpUoVi6sVLthEeT1ZOt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884056, "uuid": "5d35892a-29c6-4c07-9d8b-8e3d98d9bfd9", "value": 45056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884056, "uuid": "76e3fbfa-7fba-4272-ad21-16f8099b5029", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884056, "uuid": "fc7f449f-81b6-492e-bc35-3ccb5dba5aeb", "value": "SecuriteInfo.com.Win32.GenMalicious-NCA.32091.21864", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5ab96b1-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898745, "uuid": "b7f33d28-9a81-4886-b762-0897a07254df", "comment": "Malware payload", "value": "5ce1ec1c0ed1c14682fc3ab99b780b5a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898745, "uuid": "d579366a-7f49-4c70-98bb-1a7f56e99d5e", "comment": "Malware payload", "value": "8eb61f3ab1f7936252ba859f041bb9401ec454fc377d750bde8c926e735211ae", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898745, "uuid": "8b2fa0bb-46de-452b-ae6b-1a417d893c76", "comment": "Malware payload", "value": "8ced698902f310d03ba63d8b9017d0c5c950c928", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898745, "uuid": "ebedf5e2-69a3-4ac7-a5f6-adc9fb3a5e82", "comment": "Malware payload", "value": "45129b3904acbbda4a9ea32cd81e179080e73be9ac3a1c83d7694969407241b68379da45bec59ceb7dea9d4cdf2baa28", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898745, "uuid": "7822b79c-6052-45f8-878b-a05e578fa7ab", "value": "T1BB941837AD14E405E69240B1AC7DA16938622DF56401ACA376C6BF7C3533AC374FA72B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898745, "uuid": "89111df2-cca7-463a-889d-2b3f82e3c492", "value": "6144:BRk5nlLnF+bu8by7lgRcVxSzk3SBfizj13RBtIIZbK0oS99:BRundF+b7S99", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898745, "uuid": "8c2b6df7-2618-480d-9155-8139775c0af4", "value": 446464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898745, "uuid": "35dfb517-bdcd-4743-957e-02dbd86c9e2e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898745, "uuid": "659e5872-d0e4-4d85-95b6-b0b2d87d5252", "value": "SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.26755.3858", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8932d484-1e15-11ee-b3cf-42010a9c0076", "comment": "Malware payload (AveMariaRAT)", "timestamp": 1688878834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688878834, "uuid": "b3102b98-1ee6-47a0-bb60-8954c1699845", "comment": "Malware payload (AveMariaRAT)", "value": "03b46784a632b3cda01529d51b2d02ee", "object_relation": "md5", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688878834, "uuid": "e7ae0238-58f9-4e1e-921d-96c0d2cc6008", "comment": "Malware payload (AveMariaRAT)", "value": "9099766ebbda92be531e23f08e65ad96419ec985bed21b2ccab80bbfb0e26015", "object_relation": "sha256", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688878834, "uuid": "5f7b8403-df98-465f-a15e-15cdafa33fdf", "comment": "Malware payload (AveMariaRAT)", "value": "5867f96897ae698cba7a3e036d941c326b13828b", "object_relation": "sha1", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688878834, "uuid": "42751415-df8b-475a-b7e4-8029a07295ac", "comment": "Malware payload (AveMariaRAT)", "value": "2dfffa748c4b30fc8d1fa9a216ba20694c2e8d75162895771fdac1f79df19649129bf450a51aa7b4fb6a5e1e8819d1f5", "object_relation": "sha3-384", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688878834, "uuid": "5e90a21f-8ea1-4219-b899-519a2e9e4c1a", "value": "T18DE37D227BE54039F7B705701AF93E25D7ACBE310E31CA4B5BD4488B58B1589E9363A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688878834, "uuid": "8d3d7d6c-7842-4696-bbd8-78e0d5b258a5", "value": "0145d2c473bdbcd7b46a054bd6893ec4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688878834, "uuid": "5a9b3390-63fa-4053-a7cc-f68bfd51c0c8", "value": "3072:2k4aHUBOO36YplMqBB3ZcPxlG+bBsDHqYzHKG0qIwj:2dx3wqz3ZcDeDKYzqG01wj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688878834, "uuid": "8a2bc1a6-d9db-4457-acf9-25642f880de2", "value": 144384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688878834, "uuid": "3a99e4b9-479c-49fe-89d8-4bfaedc1f151", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688878834, "uuid": "9a560ca3-9d8e-4aef-a48e-e4f9ade99dcd", "value": "03b46784a632b3cda01529d51b2d02ee.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaca8324-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884044, "uuid": "6d50ef01-b92a-41a4-a21f-01ce62656b93", "comment": "Malware payload", "value": "81b1fc2bbb6dd9a56ab4a4476ffa7817", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884044, "uuid": "58e330d5-eb88-4658-9983-2bda5cf6bf80", "comment": "Malware payload", "value": "929b4cafc58e5692ab304c38502d88f155d027cb36dc6d404ce37c7e26b281b7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884044, "uuid": "afc37236-bfd8-4c6f-b93b-4e28ddb50dc8", "comment": "Malware payload", "value": "5c8c3c9cd09a6aea1285a341c3392ba3c1fd64c8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884044, "uuid": "e36cac8b-0239-4884-8961-eb2ba567668a", "comment": "Malware payload", "value": "23e7dc432dcfbe71fa3003f1bd5671b411ccdc4ad875d81924b41c91ef47e97b4bab160bb9cd677a7e787388c4f8be19", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884044, "uuid": "c5769fb2-6e70-4905-9db0-c0b2400f1a34", "value": "T1B8C38E119BC7C0B6D8C64B7018AEE7B3277FFF906630B0DF83945CAA4529502B598EB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884044, "uuid": "3269b6f2-09dd-4c7f-92e8-23dc0398e075", "value": "1536:NZwzFy82+lq7Z4f/HVVb6YcOajbr6/pa7mgZAF04+7NKRapug9/RdV:ozX2+lqF4fNFWbr6/LfF0BIeRd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884044, "uuid": "54e2cf20-9e01-4d54-bd4d-3c256e471956", "value": 126976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884044, "uuid": "e6efedd4-cb80-4861-803c-bb6e500bc403", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884044, "uuid": "7c425330-1722-4d15-9d4a-6d98caca9c9c", "value": "SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.25569.5245", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2835b801-1e3f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896710, "uuid": "73e2e9aa-ab56-439b-b9be-2ca79137bcf3", "comment": "Malware payload (Mirai)", "value": "b00f10db93bd4a0f0fdfbe4b1045cea9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896710, "uuid": "a054970c-7bdf-4ece-be17-4f88fc64da32", "comment": "Malware payload (Mirai)", "value": "930837d4c94721743413a42392c86f16ce5cad330fda2c391522d59c949739ed", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896710, "uuid": "f3489052-c122-426c-8b6d-ef292c4f3d5f", "comment": "Malware payload (Mirai)", "value": "967825993ae0bba6bfdc0d4c612c31bcda0bd85e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896710, "uuid": "ca3bb0c4-20ad-4a67-9fd1-4d6eb5ee761e", "comment": "Malware payload (Mirai)", "value": "4320856b6761621e670a96429379ca1cd4e825be93a34c188d464013de122f923f50f3d3a67f112c4a474681dd067f9e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896710, "uuid": "2355e296-1535-4462-a5e3-9678b01da1f2", "value": "T191F2F1A1E2579D92DF7DBF184EC6CFB893580D86F3A4AEB220807962071EC35730065E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896710, "uuid": "0d165740-c924-4af1-a01e-ab010c210009", "value": "768:croHoRBCP144i6k7PtvV+Txof6yyPtvBh4uVcqgw09I:wS4Bl6Qh8Txofty1Jh4u+qgw09I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896710, "uuid": "b34f8b89-1fa9-4e70-b1a3-ef5c68c6688b", "value": 35292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896710, "uuid": "110cd635-e5d3-4f3c-9c68-f3bde4decc5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896710, "uuid": "867fb3fd-cbba-4d9a-bff6-63cad8a6355d", "value": "b00f10db93bd4a0f0fdfbe4b1045cea9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4b9a90b-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884060, "uuid": "4209fee1-f58e-486e-8d2d-78dc1e466d0b", "comment": "Malware payload", "value": "6f7adde52a723e20f28554b2130bdbc8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884060, "uuid": "466055ea-984b-4c38-8b53-f19b6fcb22ae", "comment": "Malware payload", "value": "95452b986832700909d8bcc55ba0f5f6c1a6813b8f3b90679b8c7118224ceabc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884060, "uuid": "7e5bafe0-4cb2-4075-8748-d4a162cf4255", "comment": "Malware payload", "value": "40db3b3e6e394b5a797d5e3718fd1fe3d90d1c6b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884060, "uuid": "1fb7681b-a472-4968-94ba-f49030eb1422", "comment": "Malware payload", "value": "9fffc559b8023e7977ea3419dcf96075f2535aa80f7f9a1bbd19e496571fcac4b221df0190689205b31fe27afce01fef", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884060, "uuid": "2dde1576-933c-4d9a-9dc0-a12eee695596", "value": "T1A0637D136AE1441BE07396B0AE676675F372AC760A314E9713A07D1F3C79E528E20B7C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884060, "uuid": "d71206df-cd37-4532-9e0d-490937ffc748", "value": "08401b45957e8aeaa664ad8c929b5052", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884060, "uuid": "653948fe-80a3-490d-9514-afbc4cc001c9", "value": "1536:BjjH5Nq5Sk7DAna8u6/eI6NbQ/PqZ02k67CI:BjPHknH8u6WI6N+PqZR5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884060, "uuid": "04f8eddc-021f-42d0-880c-0771a73571db", "value": 70144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884060, "uuid": "23ffc906-23ec-4f83-8a4c-d5252b16a1b4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884060, "uuid": "01a96319-81f0-4224-8d53-d080eb3beafc", "value": "SecuriteInfo.com.Win32.Evo-gen.5795.24842", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e03ce8c-1ea0-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Fabookie)", "timestamp": 1688938542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938542, "uuid": "f7e6f592-24a6-4bc8-b3da-f19f1f790781", "comment": "Malware payload (Fabookie)", "value": "484ba824bee1da806d39dd7c902b5110", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938542, "uuid": "dc467cf5-719c-4e42-bfb9-d8f5c2d37bfe", "comment": "Malware payload (Fabookie)", "value": "959b84bd323f73783b6d1ad4bb8d05b04d10a15809d251cbdea7ef18fe202b0b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938542, "uuid": "64fedae8-b95d-4120-8f83-089deafb8772", "comment": "Malware payload (Fabookie)", "value": "01aab40e921d03bf5724d389754212fc16020bdb", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938542, "uuid": "ef6ecd40-8ffd-4300-9e51-fdbb4ec0056c", "comment": "Malware payload (Fabookie)", "value": "7147ae7a0afc9e30d8d5a496fff46fabac0fd75fbbc5fb5a1cdb589e18a2f0b41c6505586f0044dbb6319194745418db", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938542, "uuid": "2ec3669c-2fc5-4420-aa51-fe1c60300154", "value": "T11624AE80F390E195D64D8175C927C9B85366BC1C9A345BBBF294BB5F2E322C7403AE27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938542, "uuid": "4d06665b-d89c-40c8-baf4-9eae43aa6736", "value": "4fd11f5c9a089e7b45c77cd8b5fde1cf", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938542, "uuid": "fc23a737-e977-475c-979d-b0d7e63c9116", "value": "3072:/PDOEk3kKqUa9antF5hvvJkeXp2QhHkKqUa9antF5hvvJkeXp:HeUKq99UF5hvvfjhEKq99UF5hvvf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688938542, "uuid": "a2b03876-e323-48ec-b9f9-faca8019cae0", "value": 215040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688938542, "uuid": "60eac0bf-f626-4982-8a20-4d51a2e7205b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938542, "uuid": "21b4b728-b498-475e-8ba3-a66e30b4b8d3", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b091202-1e3f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896661, "uuid": "8fb8e7d1-66b2-46c5-af63-d2df5ece323e", "comment": "Malware payload (Mirai)", "value": "ad17750d42a52a65a08192485b0f6701", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896661, "uuid": "dd47bead-b0a2-44b8-8bd7-3bc9f29850e6", "comment": "Malware payload (Mirai)", "value": "9b282177b09ca96bb1035867b2b44b1b54295006caa30ac333c916328eeb0031", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896661, "uuid": "b91d94df-7796-4fcc-b831-41af177fe7f4", "comment": "Malware payload (Mirai)", "value": "649d044d03111ad309e276a03c2c394d872dede4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896661, "uuid": "04556276-e577-40a6-8503-db1dfe2b46dc", "comment": "Malware payload (Mirai)", "value": "cfe09ff45cc0862f45b959fa1a310a32cecf64938dc2e6fd2c4c218f55931646b0c5cf2a260bb240abc60947d7c8235e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896661, "uuid": "b27bf0f9-b7e9-4c1a-bb7c-1e43a4379c6e", "value": "T17DE2F12F62BA2D26D53089388EE0854BA1E324F045F3B3343034E2D565EEC5B9E7321B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896661, "uuid": "aca09ade-deeb-4bf8-9e43-d85808d17f8f", "value": "768:RuZ1iUHyaSCCZyD5tJIRo2kw+Zj09rGmKFNg/ws3UozJIg:RuZpHyfZyD5tUo2kw+ZjmKFUzP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896661, "uuid": "0a4067b5-c894-4bdc-b25d-755822e3d9f9", "value": 33044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896661, "uuid": "108c6106-c636-4cdd-8b74-685aeabf3ca8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896661, "uuid": "222709b6-4e7d-450a-aa3f-53d4a3f76ee9", "value": "ad17750d42a52a65a08192485b0f6701", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc206447-1e9b-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688936498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936498, "uuid": "6a2e521f-838e-4fc3-994c-c1167477be39", "comment": "Malware payload (Mirai)", "value": "7cc60ce01a37d66d87a307ab849adc98", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936498, "uuid": "550d8811-377a-4ef0-a603-2715358eb3b4", "comment": "Malware payload (Mirai)", "value": "9b468a26d436ec5db28b8cdbe4b79ab6548d63e127b743f0e7ba88e9701342e8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936498, "uuid": "ee07add1-63b1-4621-ab00-e11723f4980d", "comment": "Malware payload (Mirai)", "value": "31b9c30a53a59a8e5d683c842d19af09a000155c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936498, "uuid": "0fe91d07-6951-44a3-a901-ecb67fec12e5", "comment": "Malware payload (Mirai)", "value": "ca7c289d10adc0261fa4c5063cb3ded14496108744f64c8b86b4ed97cac210fea4824217d42d7b56fddd15bfbd44d6ad", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936498, "uuid": "12746163-7c73-4cd0-af9c-9b73cef8d7d2", "value": "T15BC2E040D3103EC5EFCF7CB99D2691C57B2B1B4E6B4BD4A2B278911374A2D2B6901ACC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936498, "uuid": "d9a64091-7cbf-4f85-9391-19a9c2b7e84f", "value": "768:wUbgeS1f8Dnz+AHyRas6JAshPVq4uVcqgw09M:wUbfaAQGAiNq4u+qgw09M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688936498, "uuid": "fe9c1ef2-346b-428c-ab3c-58b66fbb1fee", "value": 28280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688936498, "uuid": "e89e18fc-06c4-449d-9fa0-464595e16010", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936498, "uuid": "d51ddd9e-a71b-4126-8443-7c5cda230600", "value": "7cc60ce01a37d66d87a307ab849adc98", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f345e09b-1e53-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905640, "uuid": "1ddb66ce-2ceb-469a-9ddd-f9b192b617ac", "comment": "Malware payload", "value": "ea41f063d08a24c992a9db51ebd1fd7f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905640, "uuid": "6da402ac-7fb4-4e78-8daa-5eed259c7381", "comment": "Malware payload", "value": "9b51a7156f242aaafb43c7ca8b5ff9547643a747e4a672d06669aec9a29b28ee", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905640, "uuid": "9dc92a20-b836-44dd-a4fb-317ada93e0a3", "comment": "Malware payload", "value": "f28dda174cb32acfdc47cae0a101de53ab78d3a4", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905640, "uuid": "1cf06994-0021-497c-8a48-680ec0a8f4d0", "comment": "Malware payload", "value": "162f4e47e6a8216015930accf1fc03e71c3ad66aece213ed61f2ad7156d7c632712b658f2604beef91dec68ee89e7823", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905640, "uuid": "7c2652d4-d233-4c7a-a4f6-11a13758d6d5", "value": "T15F238C5E9E00C634E7BF46FAD6387D54ACAC85111BCD92F30C18D16395F3AD5B9B20A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905640, "uuid": "6950cf5b-bebd-470b-9a6f-ef1f07fdc701", "value": "43a55c2d244fa869779f48427aaa4d6f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905640, "uuid": "a4178e50-ca74-4f94-85c0-06479868c62e", "value": "768:qiX/pJiW4DhHr1fXgLAn1F4vXGmUEKRnJyQud4W7BGONDRitWTWN5hOj2jIRo1ie:3pJiW43gCSiNWTWN5hzZHVuIXxXFyqdR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905640, "uuid": "3062acb1-dddb-4d9f-bed9-6805fa996022", "value": 48640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905640, "uuid": "bc52a066-8ddb-41b7-9a1d-f29f8e13004a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905640, "uuid": "8144764e-0a7c-40c1-bac0-82c56a4f694a", "value": "SecuriteInfo.com.Variant.Mikey.130986.16854.20013", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9f5e9bf-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898753, "uuid": "88ce2d00-4776-4d81-afcf-61c1fc516a10", "comment": "Malware payload", "value": "017e1e4dad762b7fb898b0ae61bbdbd5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898753, "uuid": "179cdd45-5dd6-40b7-b41e-688d18e56c34", "comment": "Malware payload", "value": "9b72e71496e487062e0aef135c7f8d7676ff1816bf4831ee43f00f463b700745", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898753, "uuid": "6c51abc6-09d1-4fc8-ad5a-281051cd5ada", "comment": "Malware payload", "value": "b15b711fb7e56e9bb4320888f4928989b7122dbd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898753, "uuid": "f1d373b8-2db1-4f86-b43f-3b5a1b435e1d", "comment": "Malware payload", "value": "1d55abc1cca84ea35f9d04e3f14c6fa044c68b42b810292ff4a487a3c18015eb4d5dc7405ed468b8cff0ce5cb75c3e7e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898753, "uuid": "41d03f87-eac5-4796-9910-9949ef6f182a", "value": "T1576302B1AE9838E6D29784FA09C6C9B9422D3632D73242457D3BF6037642373AC3C4D6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898753, "uuid": "4823dd4a-8f27-4dc1-89a4-1c0f09523ef5", "value": "3c0e70bfa5f73f1f1cef484e2bcb5bf8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898753, "uuid": "e6b36dc7-c338-49ed-b466-ea00993565ed", "value": "1536:4VPDKlA9SSl65coksUgw6n65QBcp8em7L4pKdiRhR/N:4pDfTlMkcwy6GfenpKahR1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898753, "uuid": "9b8351d2-f510-4292-8edd-98f51e1d3090", "value": 72704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898753, "uuid": "0a13d48a-d7c7-4d55-bd84-ab87643814c5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898753, "uuid": "85c92da3-9e35-4f9a-9d4a-2d0b49f6f900", "value": "SecuriteInfo.com.Application.Keygen.Xpstyle.U.9789.10066", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae63c7ee-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884050, "uuid": "93002fbd-747c-4f14-a852-98725346691f", "comment": "Malware payload", "value": "a68d2b21fea61bbc266362c4f6bd99ae", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884050, "uuid": "89ff8f38-a877-46e9-ad73-348419813389", "comment": "Malware payload", "value": "a0ff457b92f9248dd442a8759232c128de720e5caddd542ea338fa42f46941e5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884050, "uuid": "4e3ac6ce-b68b-4be2-8917-1b33f1c8a785", "comment": "Malware payload", "value": "2174308463f1753afbca6c17795741b62bb52ecb", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884050, "uuid": "0dbfd4cd-cfa0-476b-bd4a-c0c41401e865", "comment": "Malware payload", "value": "e0a2120c04bb0467f399bbd500510a6d7df585f687b0c017d531e9b58b604b01f927418dce61395288108ca58faf0978", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884050, "uuid": "603389c4-2720-4de5-a916-9ffd0289b70a", "value": "T1BED47C12B9F2C0F5D6241431647E2776AA76AE528A138FC3DB64FE1C3D321619E37239", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884050, "uuid": "59dc249a-91d6-4da6-bc55-5506517a96bb", "value": "7dfd3003e71a2ecd9250fd4a490d31d9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884050, "uuid": "2f1fae02-0d84-4c82-91ec-ebfab0ac0cc8", "value": "6144:7Bmxj4Tb0YWqh77HLDaEmeRuNLm45pYK44iMcPqSS7tQldtnN9pc:7BmxUTb33aJeRuNqyKFS7mdtG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884050, "uuid": "3765f783-77ac-4207-99a1-bf133c120b3d", "value": 655360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884050, "uuid": "7036620d-13e9-415e-bde0-d06974a3f4bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884050, "uuid": "3bd2c023-2bfe-4c9d-8a13-135ae2e22817", "value": "SecuriteInfo.com.FileRepMetagen.27309.6274", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "364731ae-1e7c-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688922933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922933, "uuid": "9d93c0a4-db81-4d52-bc27-1b617c87034a", "comment": "Malware payload", "value": "77500354fda9993aec1af114ae9572ce", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922933, "uuid": "76584e32-5fe8-4f1c-9e81-424668aad73b", "comment": "Malware payload", "value": "a15ba52d7b7b70bfcec4d4cd9ad74935fb7142dfef49ac90185485504b4d73e1", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922933, "uuid": "da3d2262-60f8-4ebc-aa14-c582720eb8ed", "comment": "Malware payload", "value": "2fa9d86fc4b25c3f0839421923729561176ef638", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922933, "uuid": "c22652b6-50ef-4f4c-85d7-1336c26d5322", "comment": "Malware payload", "value": "a75c6f30ac2f1ca09e59314bf8cf9f29f8d44f78cfa6bcc186bbf87ea08fc9e2a7ee04e65c21b454900bfb11c4c6b8ab", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922933, "uuid": "dfa6ab1b-6495-410d-8f2f-dcd9bfaccc4d", "value": "T12BB308C2AD427E33C2C2EBF6BBDBD24837F2561497DB3301A9997EB04A1A5CC1D19254", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922933, "uuid": "2b7b6b39-a837-4abb-86e8-4778f9478fc6", "value": "3072:Ovfkb87iziYjbidq9HU7stvReR2RtIfXNoaVW4:p87xYjbiwHU7sG2RtIfXCaVW4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688922933, "uuid": "56599cb8-31fd-4129-9d44-c8e4828325ba", "value": 112206, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688922933, "uuid": "cad98727-4ee5-4318-a9c8-16a57bf7d094", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922933, "uuid": "4ed4900a-a0c6-42d0-8bf1-491447344d88", "value": "armv4l-20230709-1715", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4590ac3e-1e60-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688910932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688910932, "uuid": "cea5d0b5-1d36-4d18-9073-0c1387f3aa4f", "comment": "Malware payload (Mirai)", "value": "fc22ca7c9240dbcb638931bba7737763", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688910932, "uuid": "5abc88be-3740-42a7-a357-76d2b2fb85f0", "comment": "Malware payload (Mirai)", "value": "a30b0db7d47e7f69c8a595fdc63739dfc98b24b289a7f0ac47a9b768fbf799a2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688910932, "uuid": "b797cf63-15e8-4cc0-9da9-3fc548625fcf", "comment": "Malware payload (Mirai)", "value": "871c52fe414e9b856968362ccbdc91f3a6f77058", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688910932, "uuid": "5f9cb640-aab5-4264-b6eb-e738deac56c0", "comment": "Malware payload (Mirai)", "value": "44b5bdda25922d497ce27d379dd416819d3aef33ee806305d77279f094de7f26fa25e1b0bac6cbf42a288959da2424c6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688910932, "uuid": "4b990440-c0fe-4dd8-9c1d-9c2ff128008a", "value": "T104735D24A97D2E26C0D4A17B61FB8361F2F6230E25B0965D7C760F8FFF2464468162B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688910932, "uuid": "66b7e2e3-f356-4504-a6d7-99f1be3f8fd1", "value": "1536:5ms+geQfvznpCR8ee84cNsAUiAvFI7IlNnws8v:YwfdNu4cmZvFqI3w7v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688910932, "uuid": "8dc89b3c-6d20-458b-93ee-c58ac52a46b2", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688910932, "uuid": "25a7ff98-dc31-4525-aee7-5c0e44741ab4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688910932, "uuid": "f7deb1f7-4e00-41d3-971f-2c740ed46d30", "value": "fc22ca7c9240dbcb638931bba7737763", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e74701d0-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898748, "uuid": "496559de-e9c9-4723-ae90-15e9a4efed46", "comment": "Malware payload", "value": "93e7ed7d61043a8ba8782a0e4b8d6638", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898748, "uuid": "4fef1bf9-e96b-4c27-84fd-9b07aeefcf15", "comment": "Malware payload", "value": "a43cb57cc9f4baaa133e0dbf73cf25f4cf830ff0b59d696e46a5bc06a93eb31d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898748, "uuid": "3b3bde9d-89cb-4c57-93c9-c1f7ed947a65", "comment": "Malware payload", "value": "e544a33a132f2b745bf3cb2b8b2702d0b72bb4d2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898748, "uuid": "12bef552-cb7e-4dd6-8259-6ca89b621173", "comment": "Malware payload", "value": "234981b797652c099def742b35f81933543cc0a0c88a5c0d0068eb807207f968ed8b452b91d8149dde5bb866aa0ab267", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898748, "uuid": "94418dc8-f397-4928-96e8-5ac5790c1f15", "value": "T1CDA2E0C5E898D5BDC879063662B7E9FDB593A4220A02C3CB6504F81E9DBD3D07B2D41E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898748, "uuid": "88f9701e-943d-46fd-a6ae-107c0feea600", "value": "c2728f76e43fb2115b5a43687fb9f561", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898748, "uuid": "beaf5340-9d52-4122-9864-6219f518d78d", "value": "384:vrkNMRrmPRC1zhVqtUcKyRqocm5cYHnirZDf/aoU/ZdiSti0JNxE83J9aZuXCml4:vwozh0tUcKn7m5diFCecJA83yZAC+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898748, "uuid": "38c52d58-a948-450b-8fbe-35d3ee9fdb98", "value": 21504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898748, "uuid": "9b617071-f716-4754-a4a4-7688cd5d050e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898748, "uuid": "cff4bac7-36d1-4f48-91d6-4cb4bf1d0e82", "value": "SecuriteInfo.com.W32.Generic.AP.30314E.tr.24393.15300", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6843820-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898747, "uuid": "0a5916df-9524-4481-ac97-05c0d916545b", "comment": "Malware payload", "value": "bcc459d4fff6ad31591f2ac370ddc40e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898747, "uuid": "ab7da822-a617-44c1-a164-caffc8d3f9e0", "comment": "Malware payload", "value": "a497fd5ea68fdf320033c496fac530e4bee51fdb1e2f622d08108aa9205f031e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898747, "uuid": "602caba3-7fce-4245-a054-ac3276638adc", "comment": "Malware payload", "value": "dbb7abebff12d9d23af626c2ed557bd742a01f43", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898747, "uuid": "6b60713d-59c8-4dec-9ddb-fbf0b146fc34", "comment": "Malware payload", "value": "2fb5a62809eba04ad72412a3e27a41632a0cee147ea76acfec67d8fd1bd5cc0ce0b555eb4d5dab593829501233b3e48f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898747, "uuid": "57e860d4-1844-4472-a862-ed4d2d500841", "value": "T107034A0F30B0DAD3E5E9A3B565450B94B9B75D402234EFB6DC12ACADC7382E54E2852F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898747, "uuid": "79557316-1dc8-4155-8161-0dc4b68c3714", "value": "768:z6wG73Cwt/1/7VcVFP1YxhaIDFbBW1dxbE:Gd5cVVQBFbB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898747, "uuid": "0200d58e-a00f-4d94-98b0-385bb24585a2", "value": 40960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898747, "uuid": "d26cc95c-73b6-4de9-9317-dbe6a4f285b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898747, "uuid": "a996e23e-8862-408f-9d44-6339e940ab12", "value": "SecuriteInfo.com.Win32.Malware-gen.8425.2426", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b41f2280-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884059, "uuid": "7848bd0e-71f3-4e33-b1fa-62d06b8d218f", "comment": "Malware payload", "value": "38fe7c82d2a10cb943dc658125fc8e26", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884059, "uuid": "dd37cc47-8ba0-42a2-a5ca-a27c2937f227", "comment": "Malware payload", "value": "a4b553e1924688bd6232633b707797ba24efc75f6d7bc0a33cd9c0c00c910e19", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884059, "uuid": "c0b84b00-d8d6-4376-86ed-5e2b875e7ccc", "comment": "Malware payload", "value": "5a2f8aba24846c7f81a069573d93795710dbcb44", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884059, "uuid": "77142ea6-55e3-4671-9257-46427081a58f", "comment": "Malware payload", "value": "cff5fce81ce9ac4c73f51a25c005ab4779e0575ac7de172867f89e2d1369338348026d1600c131ed54b70f8cf5ccb9f4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884059, "uuid": "a67d2815-3a76-47a6-82d6-a56588060ddf", "value": "T16A96E148FB1797A6E3C6E5F29F79616C37EA7DC289D4690FE29C39A20CB071451C80E1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884059, "uuid": "7f24829d-ed9b-4a53-849f-973a024b54e4", "value": "87095da59c785793cfa0c1760ce1dfbb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884059, "uuid": "7ebb6dda-77cc-4916-a28d-54ccaf858d63", "value": "98304:pXn+PDa1N8RF/+Y0L0vmJBAUZL+x+KwWJxZaU:QPDlF/+YSbJV/4p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884059, "uuid": "0552f4c4-abaa-452a-9e5d-d3476cb14c55", "value": 8642560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884059, "uuid": "ef338f12-5fbb-48b4-9399-13e1ceac345c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884059, "uuid": "7cfb643d-2a98-4584-aa6b-c9ad0ae367b4", "value": "SecuriteInfo.com.Trojan.Packed.2301.5432.31761", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33efd841-1e7c-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688922929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922929, "uuid": "4153ff75-c796-412e-a523-bc4f32c82c76", "comment": "Malware payload", "value": "dec12c0791de3daa7274eff56063d5ab", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922929, "uuid": "000c5154-1005-40cb-aa6b-830b36ac3272", "comment": "Malware payload", "value": "a5d016d6887f05f4655b10f693c457fbdc78b3f88520ffcd83243d8df6177d47", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922929, "uuid": "793cf52e-df60-4045-97d2-37177202c484", "comment": "Malware payload", "value": "29d5a451f50042923f1819733fa8185d7826fcc5", "object_relation": "sha1", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922929, "uuid": "e8e03c7a-d25c-4677-8003-69098140bd46", "comment": "Malware payload", "value": "b5c8e8b9709a969d57ac407d4e3d84dd1493f4ccc1801db0b3ae7b59f89f3e3951282bcd93571f46fe7aab41bf747b63", "object_relation": "sha3-384", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922929, "uuid": "feb68607-aca1-413a-ad51-7b4a5b10fa08", "value": "T163F32AC6DE427E23C1C26BB5FADBD14533E39714D3EB23059558AFB03B4BA990E16109", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922929, "uuid": "dae5f21e-85e8-40ca-9c1d-ecf0efeb1730", "value": "3072:XCDawyJ8e9paHFRKF1YlHo5a4XnUlIU6YMF5M/9BbKwE0:DwySopaHFRKF1cHo5i2U6YMM/9Bpn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688922929, "uuid": "e76a9289-732c-4a94-9b4b-6ab332ea2d02", "value": 164872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688922929, "uuid": "76d3ba92-6e48-49ff-92f9-7f8415dd30b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922929, "uuid": "a0471558-1861-4023-bc88-b13fb1e292e9", "value": "armv7l-20230709-1715", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2600c41-1e52-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905182, "uuid": "b233e967-9039-447f-bd6f-0bb461c286a7", "comment": "Malware payload", "value": "d0124f0df0508ebddb518f111c11663e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905182, "uuid": "893f513e-d612-418f-ba06-bb2d8921af18", "comment": "Malware payload", "value": "a7478a6e2110390bd3d6bbafca19627cc1fc5a052c1136929f94b29dd39df4b4", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905182, "uuid": "e586735f-c493-41be-927a-6aa724032065", "comment": "Malware payload", "value": "c6e51e0891068c1ca8d36911a36c436fc5a67152", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905182, "uuid": "0cd5853a-7f42-4399-8f6e-acf7ae1f7452", "comment": "Malware payload", "value": "26a75eaea663e93c2554cf0a6b8fe8226a28a8b0a73a79c76eadb9940e4a76d5f8cc775376552ec5a1ebfa42676f2f27", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905182, "uuid": "a966e93e-8b84-4fd2-a204-da6ac9c38c33", "value": "T12AC3D88A6D227FBDF3DDD6B48BF3DA3056D665912BE28280E1DCDD400A247CC281E758", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905182, "uuid": "bbc644f6-b6f7-491c-91e8-d70549355292", "value": "3072:LF23fNHdXbHkkVb0GOIGCCKSwB5O1i4I54:p2vN9rEkSCCKSwB5O1PI54", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905182, "uuid": "969d04c6-fda9-4ba6-8fe1-cb4020750cd9", "value": 126523, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905182, "uuid": "84c9359e-005e-4fe7-bf2b-908ac046b27d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905182, "uuid": "e0a19e89-44e7-4091-8de1-0881cd7857a7", "value": "mips-20230709-1219", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07f2b32a-1e97-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688934451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688934451, "uuid": "cf406115-0dde-4b91-9803-dda0fe166af5", "comment": "Malware payload (Mirai)", "value": "ade9a4133f39b69735f1080438af5419", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688934451, "uuid": "be92835e-fdc8-4613-baaf-365b9d89a9b5", "comment": "Malware payload (Mirai)", "value": "a887e346bfbf95a862504e3775814e8d38109cdefae0bac96421e6c2782bf577", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688934451, "uuid": "1eef35e4-7227-4bd9-824d-9810127e240f", "comment": "Malware payload (Mirai)", "value": "0eee476a16abf6a686f4c043f6f8b30e4141851f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688934451, "uuid": "9d7c15dd-f411-4cc5-a92f-b37223763462", "comment": "Malware payload (Mirai)", "value": "0886b7bc57bd7e1672ed5a68540f84a05386ada8f94da19463350faf8ef498bad22d6daf4d9acb137610b87b490860de", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688934451, "uuid": "37688e5b-766c-4aee-a4da-d0fbe32f4e73", "value": "T17233F13892D2BEE2C3E75FBE3B1DD44F9046337466E4B12249B51548A3E30A30DDE292", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688934451, "uuid": "706af00a-04c4-4095-98fd-dcfa662da252", "value": "1536:oCoqsGR4ygC1D7aH5k0JDXTZrL9VE8amFZP7R3K:Foqs25Vuf5XT1LJ9ZP7R3K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688934451, "uuid": "70b4e9fc-4a1c-4da1-9d33-9e4892793700", "value": 51460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688934451, "uuid": "33eb2d74-56ef-4b67-bde0-5f8788606b86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688934451, "uuid": "2cbe1982-9928-42f2-b534-ccdbf7c8abb7", "value": "SecuriteInfo.com.Heur.20230709202704254162648", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3f71b76-1e53-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Formbook)", "timestamp": 1688905641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905641, "uuid": "6dd33def-283f-41e5-9f34-83d9ac5ea46b", "comment": "Malware payload (Formbook)", "value": "b3368c7d14c040c8734d69b5bbc0c635", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905641, "uuid": "080b3549-36f1-48b2-9bc3-42afe5531f17", "comment": "Malware payload (Formbook)", "value": "a8f5392112f282b9d32749631c3d85fc6b568dd0b3fe91ffb8c5c7215e3f7114", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905641, "uuid": "474a1ca6-8528-413b-bdb7-503a73d81a28", "comment": "Malware payload (Formbook)", "value": "d34224b8b7e01e22292a7eac678d337f00834a2b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905641, "uuid": "dea3af3c-b6f0-44de-86d2-4b695a2f9175", "comment": "Malware payload (Formbook)", "value": "a62c76f01bbcc4fa7ecda8cf631fc81807aec1e10db1897be7c9813ff55a40a11166fcb222f9395a6b75af741716c461", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905641, "uuid": "e01e846f-15d2-44ff-b5ee-5c115d552657", "value": "T1EC4422556ED116F7E3178AB10A7B5326F33EA74A0165151F8FA41FBE2E10FEBA105083", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905641, "uuid": "f7b9ef29-8ec4-414a-b6cc-92b1e8b644ab", "value": "b76363e9cb88bf9390860da8e50999d2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905641, "uuid": "313759b9-7158-4027-84a7-fb3a89ca0cec", "value": "3072:FJ2S2L6KbqDCwcrMEEKsmO39oW1jSAI+ltOJ7y4UjjiJ0bUSgSBQ8QNn9lmDe5+W:F8LxBszXOyrSJm/bQN9laFexrODdtKRf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905641, "uuid": "c912053a-030d-4142-b3af-a5a6796cf3e0", "value": 268113, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905641, "uuid": "7549dac5-861f-4d5a-84df-b512e58ced4c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905641, "uuid": "f80071d0-29a1-441e-99a7-ac848f92d039", "value": "SecuriteInfo.com.Trojan.Generic.30369079.30803.19914", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e187a24f-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688898739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898739, "uuid": "622452a6-820a-40da-80df-887f81d36ffb", "comment": "Malware payload", "value": "93a0140b846e0456f7b336084870a0d8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898739, "uuid": "17e516a6-ba2e-4142-bdea-c1918684d14a", "comment": "Malware payload", "value": "ad2f36940cf03479a0688fc3ec3e83d981c5ea82e3624ba68d5dddf5e56f14ab", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898739, "uuid": "64b419af-7d95-4aff-86d2-b9b6c5c1d77f", "comment": "Malware payload", "value": "e7461705c256c0a88b034fb6d8635fa48e0863fe", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898739, "uuid": "6c4ff03f-50e2-457e-af00-fd0709ae61da", "comment": "Malware payload", "value": "0ad2d97a28cd9996b663d1ffbd3e1c5b0f1cfb1ad336e66d34cabac76b189277e1a47b331d1889e4e9c0dd95270fda30", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898739, "uuid": "556c0987-3813-4a95-b1fb-1e68bcf6b98b", "value": "T19FD47D2271B1883BC1731B799DFFA6A2A43EBF112D2449877BF05E4C4F386913A15297", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898739, "uuid": "2854d629-3c0b-4752-aaa3-991eea02c73b", "value": "41d0793d628c00a6b67106ca8d805bcd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898739, "uuid": "fc98ecd4-2327-44f0-87b2-2b53d4140979", "value": "12288:bJdEHYM0fxfx5FvJhnmuP3gWpAiFk7plzwwSyFdzLJWs4g:bvEynfJhnmUpb67/zN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898739, "uuid": "6bea0214-447d-4673-bd4f-93e99a743549", "value": 621568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898739, "uuid": "009b2a10-4725-4043-b48e-d9003df30980", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898739, "uuid": "bcaba314-59f4-4c52-9a90-5cc9be166342", "value": "SecuriteInfo.com.Trojan-Spy.Win32.Agent.23774.24163", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0ea2d32-1e32-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688891356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891356, "uuid": "a37e41f8-7fa0-4434-b9a4-71236bd2d9a3", "comment": "Malware payload", "value": "4bfd7d5396f868e7220ec0de553b9c21", "object_relation": "md5", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891356, "uuid": "63e57679-1312-4791-82cb-2607a00cf4be", "comment": "Malware payload", "value": "b5f1cd78eb586620a170ecced42117d7b2874f3470de6ee10849b9205fc6bdae", "object_relation": "sha256", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891356, "uuid": "464fdf1a-3402-451f-bad4-efce2278ec4c", "comment": "Malware payload", "value": "4ab15ad2e068b05c82f1dbb3152abd8aaaaf4f1d", "object_relation": "sha1", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688891356, "uuid": "14a32f04-a4a5-4bc1-b562-8fbf7165cb86", "comment": "Malware payload", "value": "258f42d3f7eabc8a0ca782aaf94d965d14e7e1940fe3adc6ae730adf7b5e94daf4741c9f3ba61bc8afc9d5be979b2aeb", "object_relation": "sha3-384", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891356, "uuid": "1cd8bd89-2fc1-4b3a-8dde-603af1e656ba", "value": "T11D76235FE8027F49C321D56B5E8B99343C9B02BF9ED39F17702669839FC098AB42550B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891356, "uuid": "3f001afa-4768-4325-9ed1-93c3d61c94b8", "value": "196608:7YVDR6iklQQ5/0kRr6DiLv7MLl/fOcNv8FjFCqtZ6P:kVDEiqH5/0I+DGgRnOcNv8FjFC2Z6P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688891356, "uuid": "5fb7e54d-5dea-49de-8fea-2465a58925d7", "value": 7326028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688891356, "uuid": "4a01d336-8e91-41f7-9e72-d2ee40bae896", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688891356, "uuid": "a13ea5d6-7a6e-4b6d-b6a6-9764b120bfd9", "value": "ZLauncher.7z", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4bd4259-1e53-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905643, "uuid": "315cfda9-da1c-4404-9d05-9627d4633501", "comment": "Malware payload", "value": "be4569a30dc57d391176993a354f6af9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905643, "uuid": "3732c34d-a3b9-41ce-a905-fc185a585328", "comment": "Malware payload", "value": "b673b2da64085fb528d31884da75d629ec53324d163a339a45bb5bc3131f3db6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905643, "uuid": "51a46991-627c-4016-91a5-241fbe50240b", "comment": "Malware payload", "value": "fefddbd7797cea921b9194d839605beaaed04e56", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905643, "uuid": "6ee76d73-6ce3-46c8-a4ed-17b6fbb9ed57", "comment": "Malware payload", "value": "7dab2f2e8b6a3f11b84ae5fe891e1952b0d0f963044c490ce01cfe0e2ead7c05efdde6fa67b9b3b11f98dfb5240cff63", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905643, "uuid": "75da9209-8257-4fd5-8072-f741af947b15", "value": "T19B248D42B5D18072D8B215320AF8DBB65A3EB9204B6199EF67E40F7E4F343C1D731A66", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905643, "uuid": "7fca2848-9d15-447c-a840-fce0ca7a7fe1", "value": "c50ae01e06fb7f70da0afdf3086b2651", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905643, "uuid": "7701a849-ebea-47e0-8ede-3d0fe56d83cb", "value": "6144:meGDCkRdrJQit5IwLp0A184l43AOSlyZRgcWi5:mFukRdrJQiaqyZqc5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905643, "uuid": "fe3c3f0f-c64d-4f69-86ea-6ce8f203e981", "value": 229376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905643, "uuid": "461181ff-adcd-4dcc-b110-01d4f7a7fe45", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905643, "uuid": "231b9543-9132-44ad-8002-e078000bea71", "value": "SecuriteInfo.com.Variant.Babar.83927.5366.14208", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70c9dca3-1ea2-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688939352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939352, "uuid": "f9c1fd02-f697-49dd-acd8-0506e8a9370f", "comment": "Malware payload (Mirai)", "value": "5e053239b57f09787dd1097ade1e68d1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939352, "uuid": "29fa7932-431d-42a8-a5cb-d05e3757ed47", "comment": "Malware payload (Mirai)", "value": "b7809f1e4deeacfd63db8bcdbf25596d7e469a2b12fe62d60d1fe410b145f1bf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939352, "uuid": "6cf51cf7-be5c-4029-86cb-859b5acaa90f", "comment": "Malware payload (Mirai)", "value": "e35293f2ce6db44075b739b0bd7e54eeea0d09b4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688939352, "uuid": "1e2b8faa-508e-4a46-8e69-f515c0f770c4", "comment": "Malware payload (Mirai)", "value": "c36762d8168d7f57af4e88bfaf52055841359a85bcd8c6144e3cc84b02c7563a8327c12bce358c49c18589cc2bff1136", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939352, "uuid": "8cf9836c-35f8-4d18-a4ed-ba5dc0328e17", "value": "T10C23F685B8819E06CAD453BBFE0E42CD372673D8E2DE7213DE216F51379A52B0E6B015", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939352, "uuid": "1a1f4336-e76c-425a-9c86-fd70a0f474b8", "value": "768:voMc5t1FZdBkrDySeQKT2Y1J7nEwr63PhU6MTDvUZaR9QRJw:wtFurDySNq1Tm3PhUHUZO0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688939352, "uuid": "18df3a39-ecf3-4e91-a5da-19c965444a94", "value": 45896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688939352, "uuid": "00041eec-9831-4d3b-bcf3-d05a5f00b760", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688939352, "uuid": "cd37fcbc-aa0d-476c-9124-a514c78d2bb3", "value": "5e053239b57f09787dd1097ade1e68d1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8eec6d7e-1eb4-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688947133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688947133, "uuid": "4bee095f-d402-40db-befe-42ea832c8741", "comment": "Malware payload", "value": "7c8036948d2a5aa21aa92d92e8e75dff", "object_relation": "md5", "Tag": [ { "name": "base64-decoded", "colour": "#89156F", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688947133, "uuid": "9474f6bc-feed-4e92-a289-637026e1d506", "comment": "Malware payload", "value": "b9211eed3bfece3a080ba8423775975d755b3434e89b27000e33c324982e1b21", "object_relation": "sha256", "Tag": [ { "name": "base64-decoded", "colour": "#89156F", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688947133, "uuid": "3c1d593f-aee1-463d-8541-da8f1f26a127", "comment": "Malware payload", "value": "44d91725192ef9d656cad5cb684220d7011dad34", "object_relation": "sha1", "Tag": [ { "name": "base64-decoded", "colour": "#89156F", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688947133, "uuid": "60321be0-147b-415c-a3ea-c11dce361c02", "comment": "Malware payload", "value": "c3bd5541ea51a6d1729216fcff0d331ba085f6dbd856421ad534c953fe628cc14cfcc120ed39f00ca20807da0200dc40", "object_relation": "sha3-384", "Tag": [ { "name": "base64-decoded", "colour": "#89156F", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688947133, "uuid": "3c2aba4c-06ac-42a6-b305-0a9cad3ffae3", "value": "T1F5A3191772AA4B51C6995A79C0E3982043F2E7CF2733D74EBB8863464D023ED9D85BC9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688947133, "uuid": "139e60b0-98bd-47bc-b447-09b09ddeaf30", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688947133, "uuid": "d6f756c3-822e-4fdf-9a1a-8f39b776c98c", "value": "3072:s2k68OL0dQ1HglW5IdYGai2s+aqO4Fkx/r:sO8he9glW2r+aqBq/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688947133, "uuid": "00535ce3-2379-4970-ab6b-ade1a0bfecaf", "value": 103424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688947133, "uuid": "e623a2bd-5474-4c91-8037-7f65c4959dce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688947133, "uuid": "09697c5a-7453-46b8-99a3-367d06261c25", "value": "16889471318d4a797b42b0d87998ee2fe1fefd43e1d67a5e2f2bb648f429162c128bf9f0b6374.dat-decoded", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e37c5968-1e52-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905184, "uuid": "f9c989b0-281d-4f31-861b-541f3665aa24", "comment": "Malware payload", "value": "cb987c237cc3cf5f826e8c00ebb68dd7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905184, "uuid": "b0ac9272-4037-451f-94f2-a16d6e061f21", "comment": "Malware payload", "value": "bab8b344312fbb9250f575acee721949f2cbc4623fff1a9572ddc090e5097a89", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905184, "uuid": "8c478f2a-ec5c-4667-b031-50710d327c3a", "comment": "Malware payload", "value": "9d635e6596e1a02f7d1365d55c9c5a7b98f685a0", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905184, "uuid": "f60811c1-abeb-4037-adf6-c66250d85f7c", "comment": "Malware payload", "value": "19bcda52e1d0c0cf5aa7c19cbacc497c57270a643fd6b2a76173c1973f7267579afbde73f5fb702f24588090ddf04378", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905184, "uuid": "aebf4808-d63d-421d-bf28-6b14c486cf83", "value": "T138B309C3AA527DBBC5C6EBF897EAE12444E3F8351773124573C8ED91661EDC82918308", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905184, "uuid": "23d64488-b06f-41f4-a051-3462f44bf30f", "value": "1536:mvApv6qOQALGyB0YU3g0vr1sAZtsLv1ETBi9BleRr4Oj2B:mLqtALn0Y8XvreAZeUBaBlel4Oj2B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905184, "uuid": "4fd09b5e-cebf-4f5e-934b-1a68820ad7f9", "value": 110663, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905184, "uuid": "bc6adaf9-b19f-4926-875d-fd490dfa2c46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905184, "uuid": "c6bbf42a-6334-4168-82e0-7f3d44827754", "value": "x86-20230709-1219", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e9b2be0-1e0a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688873930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873930, "uuid": "57fd760d-97a9-4282-91b3-f96fdf793abd", "comment": "Malware payload (Mirai)", "value": "8c53378b88a5369edb5f004468270387", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873930, "uuid": "71a0dd24-d140-42e7-8df0-c52384538d01", "comment": "Malware payload (Mirai)", "value": "bb2b679a3fb9ce4b8c63b448bdac2a3d0aecde9597faaafd81f1038f15cbb63e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873930, "uuid": "478eb641-844a-4546-b570-37061bb50f79", "comment": "Malware payload (Mirai)", "value": "8d16ac44a81144bba1a85ec7d6fd4eefd3200628", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873930, "uuid": "6cd2e79e-a94b-4748-a8d8-f157a0d0288b", "comment": "Malware payload (Mirai)", "value": "765b5a8c4f1a24aed9f4b711c55e615194b3ba3485b9e1abed74b6bfa1cdc0a11e0fe91c0cd2f8e38009c06512505e9e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873930, "uuid": "605539e1-b906-4d55-abbe-8597228df3c1", "value": "T1F883744E3E619F7EFBAC823987B35A10924533D666E1C984D15CEE024E7034E781FB99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873930, "uuid": "31ae36f0-2a2b-48c7-961b-e50da89aabae", "value": "1536:C1TRMZjpNXYC5+VxUWPf0vx30w3rFFXxxGKO+GzeHf9p1kAHQ3:yROpNXYYax05Ew/3GKO+Gze/9pqAw3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688873930, "uuid": "1fabcc26-055a-43b1-8baa-7b700f170d26", "value": 88052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688873930, "uuid": "aa7d0c64-13fa-4597-aa69-c17af7494be7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873930, "uuid": "8bbb5f7a-1b8c-4989-b29a-66e339942a87", "value": "8c53378b88a5369edb5f004468270387", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5becb7f4-1e9e-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688937599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688937599, "uuid": "6c2b03f3-d87a-4510-81ae-d7db073fe5aa", "comment": "Malware payload", "value": "d7dc2374b9a0b67d2dff8c9f8e6c1ef2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688937599, "uuid": "1cf5d284-ca5a-446c-b1d1-8a675c288445", "comment": "Malware payload", "value": "bb7c8a266532d8f0a4233304f0969a12661042071195c6490e6c3f3fed0aa0a7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688937599, "uuid": "d6eb7426-a38b-4961-9b59-a33e1348246b", "comment": "Malware payload", "value": "21b95d1ec7b1378c18ab07fb8288c93a78b13b28", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688937599, "uuid": "a18de8ea-908c-4694-ad84-f0b7b4585586", "comment": "Malware payload", "value": "960f28411ba8b7c252e3116fcae9c93538e55bf5ce2ab73b457e11318d64f14f8f1d697da9ed1dddf735631a921ad8d0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688937599, "uuid": "78b628e0-0f24-4bef-893a-d068d9cc25f5", "value": "T17355335BB82D60F4F8A346B44D0CA5824D707C30BC38DA5A6D5CB6EF7F2A6609D92371", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688937599, "uuid": "fb54d35a-3aba-4bcf-8e00-318b2acf3ee3", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688937599, "uuid": "7bcadce9-26f3-4945-bae1-1899498daa6d", "value": "24576:nfOy73/XnYI8Py3vlgnOb3iYEqx7s2CBYqbOhMqFmwTj5dl2vSBreuS2w02VnKU:nGgfnYT6flYY3iN3TYArqFmoFFeuZknn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688937599, "uuid": "d62aaf9f-c53d-4a62-ae91-faa9e728ce3e", "value": 1357733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688937599, "uuid": "ac8bfdb8-29df-4426-90a8-e566a8a7ca31", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688937599, "uuid": "09f07700-970d-4e8d-994d-98a31e56c97c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85f6492a-1e20-11ee-b3cf-42010a9c0076", "comment": "Malware payload (LummaStealer)", "timestamp": 1688883553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883553, "uuid": "57e06edb-8909-44d3-a1d5-33fe7ff563fc", "comment": "Malware payload (LummaStealer)", "value": "3715ca8d93d5a5bdc499013cfc55da11", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883553, "uuid": "95acc1b4-4b3e-4629-a1d4-68b6e44b3025", "comment": "Malware payload (LummaStealer)", "value": "bb90c8c39ba60347b2d5f2a73a11f9c1f9f7e16251ca3098e4c087257bcce09b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883553, "uuid": "1d217043-8eba-4e7a-a4ae-1f9dd9fe2024", "comment": "Malware payload (LummaStealer)", "value": "e6c0c9a85aa722a06f3d4dd15e0aec7c779fad25", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883553, "uuid": "d379e6aa-3956-4503-9c6e-07973b0d477c", "comment": "Malware payload (LummaStealer)", "value": "f11743b5462296f668a6ca8eadbffd16273359984ffc40e67fbcf56f3f055510fac0f7177f64a7bd1bc958d1859aa8e1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883553, "uuid": "977cae2e-447f-4e12-bb2e-a8e2f948db45", "value": "T14E74E11A73E510A6E4BA63B598F202835A327CA19B7586FF1290D57E0E337C0F536B17", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883553, "uuid": "a7f30aff-d788-4acd-a855-167db6946dfc", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883553, "uuid": "85b53537-6b57-4819-b6f6-40a9eaefd560", "value": "6144:5ahOlp0yN90QE+8/3rwzkz3KKkg1sXLQphN1oF2U++wBS8:5ity90g8/bwzkmg7hNd88", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688883553, "uuid": "f03990a7-3ba6-4cb0-bea5-fd9dea18ddf7", "value": 351232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688883553, "uuid": "54c3531a-c6fe-45bb-bd59-560805f10f52", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883553, "uuid": "b8b79a64-ee79-4120-8437-30d9ff90e604", "value": "3715ca8d93d5a5bdc499013cfc55da11.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c42b5c2-1e20-11ee-b3cf-42010a9c0076", "comment": "Malware payload (LummaStealer)", "timestamp": 1688883563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883563, "uuid": "02011432-9c7d-4176-ae24-fda79cec1f04", "comment": "Malware payload (LummaStealer)", "value": "7d7356c0cfb9265b7e61bd38a99f68c7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883563, "uuid": "63bbc8e3-73a7-4d1d-a4a8-10ecbc605d9e", "comment": "Malware payload (LummaStealer)", "value": "bcd079ed77301cc5f6a0443ccb3c5b4fe4a4b660ad61d5bcc40f0224c8c2da63", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883563, "uuid": "f3562a96-b1fe-4882-b2b4-085a65f756ad", "comment": "Malware payload (LummaStealer)", "value": "007c599c04fe7b75911e24c6cfbccd768350fca7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883563, "uuid": "9164b548-7909-44ed-99ac-f9ab3d9414cb", "comment": "Malware payload (LummaStealer)", "value": "56e9af5b91fe54b12c9b4b6e3300f14d04275f0425f9c0dffc80acc0ff33ba384d048aad9c273104b0120f10a413cc28", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883563, "uuid": "b4222066-16b5-454b-a7c3-d2df72f07b7c", "value": "T11524CF4A63E564A6E4BA53B0A8F302474A317CB15B7582FF22D5D97E0E336C0B432B57", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883563, "uuid": "0b0b1d9c-cd0d-4928-b483-1876b055fff4", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883563, "uuid": "fc759196-aebe-48ce-933c-eb5851f15a97", "value": "3072:IahKyd2n31n5GWp1icKAArDZz4N9GhbkrNEk1GI8YyelYW+XgE4HfQUT:IahOnp0yN90QEW8LmmlWfQ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688883563, "uuid": "5431afc4-3d67-4cb0-ac8b-412f4509421c", "value": 224256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688883563, "uuid": "92843f24-b2a5-418a-b8e5-9ab0ec583400", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883563, "uuid": "0b83912c-6929-4cd4-b2e4-13cfc1ef01c8", "value": "7d7356c0cfb9265b7e61bd38a99f68c7.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bc4dbe2-1e7c-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688922942, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922942, "uuid": "7808614c-07bb-462c-b055-eee00af9b081", "comment": "Malware payload", "value": "15de658cea0ecfd85958d2cce2d1c460", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922942, "uuid": "fb4af497-e93e-42c4-88dd-884b0b48f0e1", "comment": "Malware payload", "value": "c077450396d5319dea59d52a2dbc5ad154bdd77b64a95ea3e940c2341facc173", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922942, "uuid": "e8a1c324-bcde-4b68-989e-41f9a020f0d8", "comment": "Malware payload", "value": "cad4ac3dd4db82b50a5a4b49bc8bae3aeb2e3bec", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922942, "uuid": "66a8f1c2-2f6d-47aa-a7d3-935aa756b405", "comment": "Malware payload", "value": "183ef90a0991ad3299205b967c3fdfca76db26eef02325fbe6f4730066e4be4ea2edb0763b521febf08afcebdc23a3fa", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922942, "uuid": "a8694433-304a-4fda-8cc9-7086775dc8e0", "value": "T132C319C29D53BE33C1C29BB5BB9BD14837E35624D39B3301A9986FB04B4BACD0E19255", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922942, "uuid": "7916e17b-a4ce-4cc8-b2ad-d92d1f3e87ea", "value": "3072:9Ho//gjsqzaCKA6zvzIJ4pcn+eBWfERfUf8:6gjXaCKA67pcnDfUk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688922942, "uuid": "8a79e8ad-2997-408e-8e38-07d9ca0fef1f", "value": 126379, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688922942, "uuid": "e796a8ea-ac6c-4821-86a1-ca48cf199bc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922942, "uuid": "c11fc6da-456d-4f3b-a5ad-e7a8e7244b6f", "value": "armv6l-20230709-1715", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "519c8450-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907946, "uuid": "dfd2720e-68fe-4743-92a0-5025b7cf7c29", "comment": "Malware payload (Mirai)", "value": "f93431e35e1efe5c7c6292493fa4bfa0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907946, "uuid": "e8a40513-e1b9-4612-bd96-61631fb173b4", "comment": "Malware payload (Mirai)", "value": "c35bd3f57c459bd3b70c6a90c455e1d00799a4d736d9887bc7ed267541aa91d1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907946, "uuid": "389ac295-ee20-4165-8abf-2d980d751f0f", "comment": "Malware payload (Mirai)", "value": "a5e5abde6922f25f15e5367e336aecce6b66e939", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907946, "uuid": "68ade6d4-9936-46f6-8584-f2a43e949e4c", "comment": "Malware payload (Mirai)", "value": "73bf2559231162a6d3c518a598741ea2973ea6820e4a2ae4ced66abccfde27692d257ec3defcb5746038ef965317aa74", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907946, "uuid": "f4343000-8897-44cf-85e3-4a7daa0ca253", "value": "T1D2533A41FC815623C6D112BAF66E428D3B3617E8E2EF32139D256F2177C682B0D6BE45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907946, "uuid": "c7347674-ec70-461d-ba97-0fe31f571aa8", "value": "768:2/ljta2EO+L5S4Md0HmILmgyktQM5UdlCEfmOdWg9UHQKjTYWndRMOfcsCuzSAWe:4ljvEOcuHktQMe6BHPxIOUAzSrHqbrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907946, "uuid": "0e3ad1f1-7196-4237-bf99-fe3159f8978b", "value": 61392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907946, "uuid": "18d41339-7760-4b9a-8000-0dfb13348b81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907946, "uuid": "1713f267-fa20-4025-a6af-5471461d827f", "value": "f93431e35e1efe5c7c6292493fa4bfa0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7174cfac-1e20-11ee-b3cf-42010a9c0076", "comment": "Malware payload (SystemBC)", "timestamp": 1688883518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883518, "uuid": "8eea53f2-6ed3-47a0-b097-9f2cf96a3f50", "comment": "Malware payload (SystemBC)", "value": "bf89b649f21af548c8966b3ce5915fb6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883518, "uuid": "c35514a9-3756-45d4-b16e-933c5d5380fc", "comment": "Malware payload (SystemBC)", "value": "c457750d7351711f630c4349aee88f66247a10589cd27265cf9ab916ba204626", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883518, "uuid": "96894abc-d559-47f9-aabc-e8282fdfb48a", "comment": "Malware payload (SystemBC)", "value": "397e45ea10a6e1d21c3c47a011295a7a4666dc1e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883518, "uuid": "302c4a7d-b282-42e7-9ca4-39e298a8013b", "comment": "Malware payload (SystemBC)", "value": "cb06f6809698ba2a8faada6c284537987dc9257902b1aa7f49fb13130954deeebc1013750c48ba49d4e17a11273c3470", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883518, "uuid": "6222e661-b50c-4ce4-9b7c-711165b80f6a", "value": "T18E249E513EE1D432E6A7C7304834D2F4A63BB863AAF5858B72542B5F2D316C29A7D312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883518, "uuid": "c0abc6e2-6f28-4d64-a15c-d725afe6b021", "value": "7c7a6cc71dd3b50d1830b62fec5ef581", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883518, "uuid": "c240fcc7-3863-4d0f-a2ab-9b7a5e9c9390", "value": "3072:9NixcocAj723IKDt7e103kSrey+R0llMc9XCYz2QJz65wWFo:ScAj723HReADrgR0lyoSYCczHW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688883518, "uuid": "43f60d0c-35bc-4e18-bd86-19dd165387af", "value": 214016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688883518, "uuid": "edc99fac-3318-475d-8d21-2b8053c75362", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883518, "uuid": "d345827f-4f21-43df-a3e2-1b9a3fa6cfd4", "value": "bf89b649f21af548c8966b3ce5915fb6.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6b0beb8-1e06-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Stealc)", "timestamp": 1688872521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688872521, "uuid": "ce86de0f-affc-4ea7-ab21-0386afe70f5e", "comment": "Malware payload (Stealc)", "value": "a690e057602d61188317fc887553870e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688872521, "uuid": "f5fa0a4c-b4f5-42c2-8523-df32ccf44a41", "comment": "Malware payload (Stealc)", "value": "c5067403a8eddbfb4396e7bce5dbb929b841ae0f00622acd7063cbf4a38b9d8d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688872521, "uuid": "fe625695-0c04-4182-8deb-0d911099fb15", "comment": "Malware payload (Stealc)", "value": "795bbd8e63ede2c3e589d8c24f25147fd0c18126", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688872521, "uuid": "0a9ba164-fd08-4baa-a4ad-87ec0973ace8", "comment": "Malware payload (Stealc)", "value": "f3c1cf90945d1fdb30743f0a5b1b1c0cb0ed6c1a47cbca794bfc5b5a8d016943f42d764efa8a0726dcfcc8422bd62d12", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688872521, "uuid": "d181a28c-39e7-4435-bc2a-f084c3d81f7f", "value": "T142349E1372927C72F7224F315D2AC6E43A1EF95D8F1867BB23182E2F19701E19672726", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688872521, "uuid": "4315ce64-d48f-47ff-a251-9fdc42c82c4d", "value": "ad776f537988b97c36b2101a62f689be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688872521, "uuid": "ad67bcac-f818-41c6-9cb5-529467dcdbbd", "value": "3072:AT4If4ta31cxDHaOLOxycywWRfjccAx/4:lftEM6OLNcyRfjx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688872521, "uuid": "b4a46378-f283-45da-957b-16ee297e886d", "value": 238592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688872521, "uuid": "d8e4d211-2606-42c8-8c82-699721b7bf85", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688872521, "uuid": "60efdaed-5b8b-4172-b42c-ff6641e994a8", "value": "a690e057602d61188317fc887553870e.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c96dbeb0-1e9b-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688936494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936494, "uuid": "002f4622-efcf-47b5-9489-5438b47b3c2a", "comment": "Malware payload (Mirai)", "value": "8ed29fd66a1eea79428b365f4cec3be7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936494, "uuid": "5314ecff-cab1-4ed2-8a36-ac35ce3c3202", "comment": "Malware payload (Mirai)", "value": "c53fc798253d9e7c7946734ed42fdfbe5e2fdbbf70667098ccd8fcff775ba382", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936494, "uuid": "32d48e46-cedf-4811-bfb6-ed550e486c28", "comment": "Malware payload (Mirai)", "value": "9b003ad8de83464121a10903682c1fe90f3f2009", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688936494, "uuid": "f45663da-d42f-4ce4-bc22-75e39e6f6fee", "comment": "Malware payload (Mirai)", "value": "e6727c30c1c4310508e5e7b8f5abdc091bb0656e4ffa6c323e13655fad4a0ca261c415cc77f86f02390a914b7b40870d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936494, "uuid": "5f1efa1e-1af4-4bed-a665-da6774b0e71a", "value": "T1C5333A8A64112E6DE9DB5CB981664F0ACE541210B093171BB3BBFDC339333A4FE66549", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936494, "uuid": "e666ea6a-30fd-4081-a999-b3de50989df4", "value": "768:oaXTrofl4ghoueg2me2nPQCHEM/ArPwqLWHm2T6oxol7gSu9+f1prtkONl0eViM:oaKdhoRg2mew4ChAVLD57gSyg1pRrSM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688936494, "uuid": "0a0a5fa0-a9ed-4866-9ad5-d0ac98392d17", "value": 52820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688936494, "uuid": "d74b6b47-918a-4701-91f1-76b827073cd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688936494, "uuid": "9e651e98-8c35-48f6-a54c-99344da6f2d0", "value": "8ed29fd66a1eea79428b365f4cec3be7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5e3315b-1e85-11ee-b3cf-42010a9c0076", "comment": "Malware payload (DCRat)", "timestamp": 1688927119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927119, "uuid": "ec4c2c53-5b45-4dcc-9464-c78af1306090", "comment": "Malware payload (DCRat)", "value": "321fb7a10a28f8d7e40f73146fafaf3b", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927119, "uuid": "8b6b6282-48ed-4cc5-8a97-d0f5ac49c65a", "comment": "Malware payload (DCRat)", "value": "c6f76dd944b0383dc4dc714174210df95f3e56f86b70beb7668eb18a11e223fa", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927119, "uuid": "5e656ea3-e248-41b7-9225-e3adc14c94c9", "comment": "Malware payload (DCRat)", "value": "42ff84196c360936ef0ebbc89abf2f6d97343065", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688927119, "uuid": "12c07ae3-4755-4d74-b1ae-f071a854abda", "comment": "Malware payload (DCRat)", "value": "b36bda0523b6530d841bc2facfb9a5ca5f9c752a10aa6800e06c549b482c1596d011613d6398cb38395c9e1fffead8d5", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688927119, "uuid": "f1a0e3c6-5c58-4d1c-9f38-cd3ca32795c1", "value": "T137658C027E44CA12F0091233C2FF555847B4A9516AE6E32B7DBE336E65523AB3C0D9DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688927119, "uuid": "c3f04329-b49f-4062-ab4e-0d99b3710419", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688927119, "uuid": "b801dd7c-1807-4860-805a-b594b4473c78", "value": "24576:edWjIqrUgLy1ouH8irAmYmctqudaQtrk0xf+LVmyhharuHrc95z:OUIqHLyTUm1qaKF+hmCdo9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688927119, "uuid": "3402b34e-8ee0-415e-87ef-d1244d1c7012", "value": 1504768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688927119, "uuid": "301b1444-61b0-4a90-8716-c72d3a317e2e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688927119, "uuid": "8b3b3be2-b887-42df-b2cb-1dd2a8bacb2c", "value": "321fb7a10a28f8d7e40f73146fafaf3b.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2f8eeaa-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884058, "uuid": "31075126-2837-421d-ae0f-4013c62009de", "comment": "Malware payload", "value": "1cb52a3f80aeb2e121649fbb7ec9908e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884058, "uuid": "58754332-925b-44ab-9db7-66667f8b598d", "comment": "Malware payload", "value": "cc774542418fa4c4e899cc07fa1ecb510cb9cb948b2c2ee0e359a334cbca05d1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884058, "uuid": "d0c48d11-e29b-43e0-b98d-ba9cfb419aef", "comment": "Malware payload", "value": "5a42ba134ba4ef7dbea3b8e7ea396323184e3b0e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884058, "uuid": "373adf11-e5ee-440c-aca7-c8fdcdf047f0", "comment": "Malware payload", "value": "7c353f934ae9b71c1fab338b27c027a7a5fa63bd77f987442a1a7170d66e2db0ffa0005e9aa89970c78b14eca28730eb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884058, "uuid": "a1f422b2-a916-4b4e-89ae-aa9179373d36", "value": "T16F92A41B16E18C37E055FE3017BB0AC9CD7BF89017545A8F7A261E8AC970F189D172AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884058, "uuid": "c7b48192-7508-40db-804d-24e80d153290", "value": "96:Yh1CrPApGbPFLJO0VLoUQunloQP/mH5Z3KDTGq11QGN+bWI3aaK03dFfhrpVs7:GmApGDlJH5flxHmZuQGonU03HpFVs7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884058, "uuid": "758067cd-eb10-4115-bebb-0876bfd71254", "value": 20480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884058, "uuid": "a0af9e44-819e-461b-ae1b-119d2aaccc8d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884058, "uuid": "3307778f-5682-49ae-83d1-72bed27e0a9d", "value": "SecuriteInfo.com.Heuristic.HEUR.AGEN.1361464.9121.18591", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a1aea27-1e1b-11ee-b3cf-42010a9c0076", "comment": "Malware payload (DCRat)", "timestamp": 1688881224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688881224, "uuid": "4c6a2071-c06d-420f-9e57-7f0e04d8df27", "comment": "Malware payload (DCRat)", "value": "03b47877da4659b3d040b8693584c6a9", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688881224, "uuid": "854c048b-2caf-418c-bbb8-87425972a321", "comment": "Malware payload (DCRat)", "value": "cdf345883b4a43f29f07b378ad1e575875661182c9662598090ee2db13d76c7d", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688881224, "uuid": "6a7bcef4-8562-40c1-a247-60a04df8879a", "comment": "Malware payload (DCRat)", "value": "217d0c7c0d4a484e9e2cb5411adcc83669035080", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688881224, "uuid": "1b3d63f7-c721-4182-8543-2ce72c55a1c4", "comment": "Malware payload (DCRat)", "value": "6aacceac3a3814c4d0520af5c6e17d16953f5d8d8ca501a2ed4a0e87accd257deeef4ad82a7c9e6f1f1ca1f9dd144eca", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688881224, "uuid": "fb50ec8e-01ba-447f-bb22-f9f76aa6a4e9", "value": "T1DC05E6027E86CE11F0191233C2EF455847B0A9516AE7E32B7DBA3B6E55123A73C1D9CB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688881224, "uuid": "9cb20731-7a10-4712-97dc-217e87d73434", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688881224, "uuid": "8a09ace2-87eb-435b-9b9a-31f66f2d657d", "value": "12288:rbf90PybXwoFdtzKf87FxrgiGCI3R9FdVS8B2rO48J+i+EmP:rOP+AoFdt08ZVgiGBu8BS2+i+LP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688881224, "uuid": "6c81cc96-d69a-4da2-9d84-12fa4c79ad10", "value": 846848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688881224, "uuid": "15d91719-bef8-4b99-a950-b3e083a023a8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688881224, "uuid": "390e3410-4659-4c80-ba66-64dd71f7186f", "value": "03b47877da4659b3d040b8693584c6a9.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7980922-1ea4-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688940303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688940303, "uuid": "0f2002c8-fe20-46d2-ac21-3b5aff76e73f", "comment": "Malware payload", "value": "419cc19adeb2e52cd29773109862d632", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688940303, "uuid": "06a01aa1-b19f-4128-80bf-fb6701eb82d4", "comment": "Malware payload", "value": "d0981f1dd592f10d215ceae3601377856e06abc3f4c171959858fc2a3fd8876c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688940303, "uuid": "47bc577c-4306-4497-bdc3-9065e41550cf", "comment": "Malware payload", "value": "0722bc7b5fa9e6fbbc579240cb289269795962ca", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688940303, "uuid": "f6552253-7c16-4bd2-8058-75745aec1e50", "comment": "Malware payload", "value": "dccc0b649ee57ddea59991df73c3e64d130b9faabd98c47d1210638e95da8c08fb4b18d6f6532e5aa15bd32cf76fb36a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688940303, "uuid": "5f39624f-5f17-40f8-8fb9-a772b96d65c8", "value": "T13CC52970B4C18CA2CE5A02F2A66F95060E528F521A68A99C37DBB7DFD77E3C3748D045", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688940303, "uuid": "2cf34457-8f07-4522-8d31-9a260be71faf", "value": "24576:s5tizThcc2pVu+WKnWwCt2luCdHdq/UCp9aRZ7T:s5mctr3Ct2luCdHd5u9aRZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688940303, "uuid": "bea14643-84d6-4189-8bf3-9510b6afdd5b", "value": 2497024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688940303, "uuid": "8291e675-065f-40e2-ada6-b20e6d05944b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688940303, "uuid": "2e6b6505-9d98-48fa-b7a8-7db4f8260d1d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d231d6de-1e3a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688894847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894847, "uuid": "78788313-32d4-4f0f-a588-03430783d445", "comment": "Malware payload", "value": "b1587c741654c1bcb1390751a8f28337", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894847, "uuid": "c1632c38-cf83-4f49-aece-1f99f4fdbbd4", "comment": "Malware payload", "value": "d1e2a4e8cf89c870ae9fb3a3c1616b207dc2c35623020e18e9ee30ebe056338b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894847, "uuid": "694b2204-0efd-4c0a-a216-7362cc32344c", "comment": "Malware payload", "value": "c035e78133087bd1ddd1d44cf1c3c9833fc3f0dd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688894847, "uuid": "d9c1f410-17d8-451e-96bb-6e80b027c396", "comment": "Malware payload", "value": "7deedd51cc787d7f8004728cc51cef0dd26aec8e7ca6fa18a923cd44290b86f68fa94939bd6326b0516243e4a08a4f8b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894847, "uuid": "20ae800e-f099-4b70-9e88-08262fa559a7", "value": "T102859E21779180B7C6B33D31D55A937EA674EA300F3982F756A10E393F601D29A3866F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894847, "uuid": "57f2cf20-4349-4b54-8ab0-1aff93a9debc", "value": "cf1bd1b0419c4d9401e01a520d0c4455", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894847, "uuid": "5f07f1b8-d2e5-44b5-9766-48268cb0a59a", "value": "49152:7iNxY8LVDl0sckHb+kmWXAOOUR/wiKQXhkD7iNAWVFL2URHazk1Z82KIRS:58LVDlf7+HKOUR/wiKQXhkD7iD7R62ZA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688894847, "uuid": "0e0b033a-a57d-4e18-8401-bee130074783", "value": 1865752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688894847, "uuid": "b4949677-b129-4fe5-95ef-8188f99a11ae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688894847, "uuid": "f7567eb4-f3c0-4f4d-aa3a-9f95fb0ce58a", "value": "b1587c741654c1bcb1390751a8f28337.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a52c639-1e20-11ee-b3cf-42010a9c0076", "comment": "Malware payload (SnakeKeylogger)", "timestamp": 1688883533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883533, "uuid": "6435802a-0346-47c5-adb8-650cc19107d1", "comment": "Malware payload (SnakeKeylogger)", "value": "bafb667680a0d2eb5c5671e111361d38", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883533, "uuid": "2c1f1f1d-333b-422d-9dcf-4f82fc646aac", "comment": "Malware payload (SnakeKeylogger)", "value": "d1e6c1aa5e9ba581f78bb0270c55f94dc5013f5d546ad2524efb6b005dce36e8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883533, "uuid": "c8636520-29cb-4527-9466-cedb5a2bed8a", "comment": "Malware payload (SnakeKeylogger)", "value": "9547ecc6caf8ed15adca89d880c5f80703d25e38", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883533, "uuid": "2713def8-da88-4e65-a364-b935c15dbb53", "comment": "Malware payload (SnakeKeylogger)", "value": "a74e7cd42b8d1c9049f566d57e7232c48bb1580685600c86afd6596de6a5e1f9f61c485b83dc14f025e293c5bd0013d2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883533, "uuid": "6a054acd-6744-40d6-b23d-8dbd486aa697", "value": "T18EC4483C18BD5323C174C2B6CFD5D723B254946F3162AA765DC39BA64796E022AC323E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883533, "uuid": "9919601e-9f6e-4449-8ce9-807808d17e15", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883533, "uuid": "1aab6765-addb-4b3e-97ff-f9eb21b465a5", "value": "12288:g4UZujY20ar/955SRwwh8BG7gYkJGr2qvhb1y:SujS495cKwYGEYaqvR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688883533, "uuid": "eeb80510-027e-46c0-a590-13bbd3f3bc13", "value": 579584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688883533, "uuid": "e29f0630-f5f6-4503-a52b-5859c69dff47", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883533, "uuid": "ed5bd256-bb1d-4f94-9931-5027f182240f", "value": "bafb667680a0d2eb5c5671e111361d38.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6504846-1e52-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905189, "uuid": "29e00105-bea8-453e-8f34-633ddcbcc18a", "comment": "Malware payload", "value": "362d6cae2d3d3f23ed7a2e65b5a604c9", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905189, "uuid": "52451250-2e59-4cac-a44d-d378af8094e9", "comment": "Malware payload", "value": "d28df8812363a5217be8e13f17c07d528c0ddb1db65d077a4523de88c0bd46b1", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905189, "uuid": "5e2367c2-7415-411e-bf5b-1483d8822414", "comment": "Malware payload", "value": "2b8b97b10e913572ff49eb48ae09da36d782dd84", "object_relation": "sha1", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905189, "uuid": "195dfdea-2981-495c-8bf3-35a48ccb68f1", "comment": "Malware payload", "value": "0dd89bc33e621f87d318f46a164403d75606bb64947d6f10ea262bdb39b3a0663ff1d0689dd6361a3fac26a0319ad98c", "object_relation": "sha3-384", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905189, "uuid": "6a8d8c6e-aa88-44e7-bad4-dee9ef1322ac", "value": "T16EF31BC6DA427E37C2C2ABB6FADBD14533A38B14D397230594585FF02F4BA9D0E16609", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905189, "uuid": "7e4e4955-d392-48ba-82e7-e3b5430b91ef", "value": "3072:pZ8QrLmgXaIpDNajwaHlFvcMyzv5tOY/HXOu7JvgM/99Do4DiE+:EQryIVNajwaHlFNyzL/3Ou7J4M/9z+P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905189, "uuid": "e372eda4-3fee-4b49-b6c6-0e4074bd87af", "value": 170300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905189, "uuid": "79ad9214-c4d5-4b3a-9845-72a0bb0f553d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905189, "uuid": "8ea7d7e2-d5cc-4115-bad3-1468375a872c", "value": "armv7l-20230709-1219", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16c875fc-1df6-11ee-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1688865327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688865327, "uuid": "d338dcbd-27c7-40c2-ba6a-ee7a6b9dab7e", "comment": "Malware payload (AgentTesla)", "value": "325fb5e2010dee354704202ba9c6cf7b", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688865327, "uuid": "1ae4db01-783b-486c-9797-5f1ffbf5359d", "comment": "Malware payload (AgentTesla)", "value": "d2d74a31f2de401802f0c467b41377f4a96e52eef8e4b8fe1e75ee9e75e6ac0a", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688865327, "uuid": "9c810952-a853-4be2-a57c-e56182d2f6d5", "comment": "Malware payload (AgentTesla)", "value": "f6f9e67cab5e36e731096ee394c48f72f9dac92e", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688865327, "uuid": "9310b704-4004-47f8-a569-d0c3cb0aa709", "comment": "Malware payload (AgentTesla)", "value": "fd8ffc6a1caf3f1cdd72656d16adeb07567a1e5562fe93fa123591ecdf2293873ef60992aec03552f86a4017c85bfdb7", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688865327, "uuid": "3bb58f89-9523-4306-ae99-1745e5959173", "value": "T146F24D5AE78F02648F511377631A0E899ABDB63EB35154B138AC833433EDC3D46666BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688865327, "uuid": "7c47a727-23c7-411b-a92e-55623e751530", "value": "768:RFx0XaIsnPRIa4fwJM/fdZFNcfaHNcBH0ibuy5NBhqeSwRSFliroWZkq4:Rf0Xvx3EMnHFNcfO6BH0yuiNBhqeRei6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688865327, "uuid": "29ebbd81-08ec-4092-a30b-156457265dac", "value": 36275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688865327, "uuid": "12ab7aee-2db8-4cd7-9d12-d33d54185a01", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688865327, "uuid": "3af8cd66-be72-40b1-8329-0473593418f1", "value": "325fb5e2010dee354704202ba9c6cf7b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d65d5076-1e9f-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688938234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938234, "uuid": "7a6c2cf4-b6bc-4d0b-9a49-ed549839cfb6", "comment": "Malware payload", "value": "6c3a97142b832e406564547fe7ca3c55", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938234, "uuid": "a6f4ed4d-6219-498b-9c9c-8422ceeab37b", "comment": "Malware payload", "value": "da1f034938efccd13590db19d170debea534c61f3d964ec229520677130f9d65", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938234, "uuid": "4f93cf63-0df4-4baf-ae2d-ef926a9389e7", "comment": "Malware payload", "value": "5dfc63c262381d856bd65e552b082b94fd04b609", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688938234, "uuid": "cec0ae08-bee5-4264-a14a-7c5c34d987f5", "comment": "Malware payload", "value": "f8360c76c97e367ed1772d1e04254423a7515a3f7ae5cbc6ecab1d46eb82570a4a872d4ddcee002005a66fe0e8f19993", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938234, "uuid": "03dff6ba-2d68-4fb5-9577-8c699355f13c", "value": "T1E646339280757EF2F97E56783CB027F66054102620E14CDFBB18836FDB6203DA567A9B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938234, "uuid": "71ee8743-a5ce-498d-9090-67fc3e363c89", "value": "9d60209cac91ae2dac0fed5627f27d68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938234, "uuid": "8f89e244-eccc-41d7-a12c-241c17bccea8", "value": "98304:qA1WWfc+BcvXG29DP6EoVjI0+rdc/f1mKMwB9cevpZZrIKr9WEA4:qGcOcvWDz+rdiEK5j1pZhI6WE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688938234, "uuid": "3f01c27e-1f0b-4ce2-95ca-b8fa8c8edbcd", "value": 5495296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688938234, "uuid": "ec58d0c7-e25c-4e02-8fb4-5656da3487b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688938234, "uuid": "22e7536f-c9fb-4c42-9c30-7a8db17809e0", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7702bbab-1e20-11ee-b3cf-42010a9c0076", "comment": "Malware payload (SnakeKeylogger)", "timestamp": 1688883527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883527, "uuid": "241db9e2-b323-4d13-9d22-4fc4b4257f65", "comment": "Malware payload (SnakeKeylogger)", "value": "762caa1af324f758515800584c2ed5fa", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883527, "uuid": "68ad774f-ff64-40c4-be9a-bf13f55ccead", "comment": "Malware payload (SnakeKeylogger)", "value": "db7f70227c9ba4a6977cbd919bf9aa2f611d2557b145e5a8d7f06d184dd9d5d3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883527, "uuid": "da41e40b-10fc-4f1f-8feb-6a0522888aeb", "comment": "Malware payload (SnakeKeylogger)", "value": "1fb9d04b2dd0124faab3643d743ca207c17d9ce3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688883527, "uuid": "f33241e7-964e-462c-8e91-f94fe6c27b33", "comment": "Malware payload (SnakeKeylogger)", "value": "55059f02a0ef05e855dde98b0a2254218f097b8075d609275550b3449acbe84a29e1fce8001906f809b62d5974377296", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883527, "uuid": "e8224ae6-7c8b-4974-b7c9-b1bbb3e75628", "value": "T1EBC44B3C1CBC7223C174F6B68FACC421F250956B3E618E3765D39999461EA0269CBD3E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883527, "uuid": "1874bb23-13be-4b3b-9bd5-eb7b4901b01d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883527, "uuid": "ef3b63b8-4018-4333-b507-6e0d5e1b056c", "value": "12288:NzfI83QbSepCGUE+T7tRzjfeR1Ee/aOx3f:dB3QbSZ3nnvjofaOx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688883527, "uuid": "92c1874c-8f70-4470-9365-8a162aaa72f3", "value": 564224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688883527, "uuid": "6c0b560c-e9d2-4cc9-9167-588f8d691cdb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688883527, "uuid": "8c9ed0d9-f37a-48b7-8e28-2d8c25eb76b1", "value": "762caa1af324f758515800584c2ed5fa.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fa53ca3-1e2a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688887676, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688887676, "uuid": "55a4f9a7-0fd6-4d2e-aac2-8795466248f3", "comment": "Malware payload", "value": "7198e07d70a0dfcd7f780dda4a523825", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688887676, "uuid": "01f81e61-0ca4-486e-9dce-682a2cde3a3b", "comment": "Malware payload", "value": "dc55d81dcae4cc820bb04a2fb520d344095f2889aaa4a382fda33b3275027224", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688887676, "uuid": "b17d28fb-ee0c-4e19-bd27-9423eb6252c4", "comment": "Malware payload", "value": "e4609151db81c0bbeb3beba63627509e589140be", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688887676, "uuid": "a001b537-74c7-4478-9e87-89b60bc0eca4", "comment": "Malware payload", "value": "213f53d47e73633ad585da09eb972799d5ec2aca3e57ab3273d0e525ea672c4fcb8672fc0219c5e5aad7f2ec439213d5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688887676, "uuid": "d071dfbe-5e96-4bf5-ba6f-0445964d273f", "value": "T150067D23F2A19437C1332A7CAD1FA6AC992ABF102D2874477BE41D4C5F39291792E1D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688887676, "uuid": "22c551c6-3bec-4966-8d35-ae03c73871e8", "value": "d6c379a329735b1a8233f6c45a3dbf96", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688887676, "uuid": "2f946439-f308-4547-8e51-544704f1a0a6", "value": "98304:wz2Bps6OvYWEW8z2BpstOvgWEW8z2Bps2:C+J4YWk+W4gWk+V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688887676, "uuid": "ea957443-6bdb-462d-87da-0e6f9d68a58e", "value": 3797768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688887676, "uuid": "7d2c9d2c-a610-4b53-9d17-354e961bbfff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688887676, "uuid": "16cc5dce-785b-4d6d-9f57-de097d875329", "value": "SecuriteInfo.com.Variant.Barys.381919.17302.2184", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e834ccba-1e52-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688905192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905192, "uuid": "5b33a354-6a7b-47ad-8dee-a0839ca5a4e8", "comment": "Malware payload", "value": "fb7cf72187ba0750d56dddb943861a91", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905192, "uuid": "aeb62586-8f25-426c-9b0a-ee82007cce1f", "comment": "Malware payload", "value": "ddb593f003dc3f42e969d9431e383e90477ae95ba6c9909646175af7829db5ba", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905192, "uuid": "a0aa5cc6-f501-43ac-9ad7-ad3350378a3a", "comment": "Malware payload", "value": "3e79a36996b246d418aba381506164c87a38ad91", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688905192, "uuid": "b28dc53d-3795-4c29-87eb-24eed19c2828", "comment": "Malware payload", "value": "02d5fc7e449c0a1891672b2543ceffd72584bf3391708731cd7b12f4ea5bb1130ca4a265ac28b54f49c761ffdcd11537", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905192, "uuid": "6277e413-ee7d-4277-83c2-c44c63ceedcb", "value": "T123B308C2AD427E37C3C2EBB6EBEFD14837E2971497973341A5995EF04A0B98D1D09218", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905192, "uuid": "9be08ade-f5da-46a2-a662-ad5e2c5e3765", "value": "3072:gbVDD/z3iQwOvk4VmSinARDEzQ2AehfNI4rVG4:wL3iQwOvFmSiny2AehfNVrVG4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688905192, "uuid": "9de8a8f9-4924-43fc-a72a-ca25ee1619fe", "value": 110832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688905192, "uuid": "f04296e9-857d-4fa5-b942-72d9f20996ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688905192, "uuid": "c9a70609-0a98-45d4-be90-c5283519cc3c", "value": "armv5l-20230709-1219", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b260923c-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884057, "uuid": "af05eb90-2886-4b87-81a0-9bf639ad7e2c", "comment": "Malware payload", "value": "18bbbae20130f76f17c5b5677e7fcdbe", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884057, "uuid": "1fe677ca-122c-4014-921f-666e58f88de7", "comment": "Malware payload", "value": "ddd480ecd9cb9f6a97f7f19d8050266bf94ef4e1c13cbbb159386ab80a8822dc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884057, "uuid": "dae951a5-b686-40c6-a7ad-7d2af0d61c6f", "comment": "Malware payload", "value": "88c2fe8153c4cae15b3d3b45daeca3fec3ccf9d3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884057, "uuid": "98501393-5d63-47cc-aa75-965b7eecde26", "comment": "Malware payload", "value": "5bfefbe7956a000ed288cc8e4dcb91e8646676a91c753918ab5dae3e6ea2ddd93b60dcb2fad5888b2bd936160c37afff", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884057, "uuid": "c8a5302b-126c-4a5a-b722-83a0aaf5618b", "value": "T171433167B902E56AF009CAB22E0192CF645A6AF54184FC577BC66F6450311F3E4F9B0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884057, "uuid": "eb38887d-8c84-4157-94ba-97bfa53eb955", "value": "768:H9mLitumZoTF83T3OWPYLsp5E4CZhbUPNYZpq:ih83T3OWPYLc5E4CZhbUPNYZpq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884057, "uuid": "f21551ff-9c96-410f-b262-2c145e52a44f", "value": 57344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884057, "uuid": "075bc36e-baee-4dec-acdc-9f7b71dab7ca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884057, "uuid": "4dcc2efa-7d0c-4051-aa7a-ba07843347ef", "value": "SecuriteInfo.com.Win32.GenMalicious-NCA.24200.18349", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d68216e-1e30-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688890383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890383, "uuid": "1bce5618-8d8b-4dc6-ba71-4bcc821c5f31", "comment": "Malware payload (Mirai)", "value": "4b48e7ff3fc807a4bc6db8ff74154dfe", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890383, "uuid": "733390ef-c488-49c8-ae2c-db45782362cd", "comment": "Malware payload (Mirai)", "value": "df62a4c8fbb21ab002b2f3f45a2cd84da393a3988efa7db3310c95dfdb2121c8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890383, "uuid": "969b309e-9815-43b4-b4db-c47df4063867", "comment": "Malware payload (Mirai)", "value": "661e081236b8d88a066530594b6a2d0dfe1884c4", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688890383, "uuid": "6a7853bc-8f8b-4966-aa70-30c5c4d21758", "comment": "Malware payload (Mirai)", "value": "6e79b55fc5105e19cb71b745955aeb76043e537c5b4f349045489ff0929f842ed83b19a3e6ea23fc0ec4b8de0728f94d", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890383, "uuid": "a1ccaf39-c592-4555-acdc-5471964dac36", "value": "T1DC532A52BD815A12CAD42376FB1E018E372263A9E1DF32179E216F1077DAD2F0E77642", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890383, "uuid": "3251a96f-d22d-4487-afc0-efe67975fa67", "value": "1536:VqWLV+bp1i1d2XlqWxGJ6rXAqShMXOHOWZs65:VqGVUEd2ImshOWZP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688890383, "uuid": "7803c730-9f1f-4bcc-8ece-82f70dbd2c2b", "value": 64484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688890383, "uuid": "a9abe9d5-613a-4fe3-be14-aa0678773613", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688890383, "uuid": "bc64697d-1fb1-4697-9ecc-25a314481a18", "value": "arm5-20230709-0813", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "387eeff8-1e7c-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688922936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922936, "uuid": "93249a76-1c03-4277-a91b-1a281a43a4ae", "comment": "Malware payload", "value": "f8f8d7a044b9a74cab0223d0f50ce7f1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922936, "uuid": "747a9d6f-94a3-42f7-a4e5-0a6bbf0fde17", "comment": "Malware payload", "value": "df7ad643009a9c1ba1e846621022ab957dc5cbdd28acc6344d884810f78bf457", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922936, "uuid": "a1de9686-ee3c-4c39-a95f-6c7f34ae7c9c", "comment": "Malware payload", "value": "201c28b644fc3bd5411090428766ef1c670c9641", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922936, "uuid": "7ab22735-db39-4cc7-8927-4fa35374b8be", "comment": "Malware payload", "value": "d327c3300f678f0839808acd10814a4dead406dd06b43e4e8c488b1d3e0ef9e01d6906c9b1774e410eab0c545444f714", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922936, "uuid": "f1a521c3-2518-4add-a54f-4e7e9d78289d", "value": "T1CBA319C36A53BDBFC5C6EBF4A7EAE13444E3B8352763124477D8EDA1591ECC82819248", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922936, "uuid": "fd59ea60-a8c1-4f21-be5a-700a805ef7f7", "value": "1536:kIxvADeZSVftFqIkt5M0ZvpmkTQpBi9BleRr4Oj+B:kReqftdktFZvpmkTMBaBlel4Oj+B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688922936, "uuid": "8761eca0-3c1e-47d2-8fb4-352c280133fe", "value": 106659, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688922936, "uuid": "2ae753ec-6566-4d73-ad45-ed1c2d70a425", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922936, "uuid": "56471273-92d8-4428-8581-f9cc0f0e3ddc", "value": "x86-20230709-1715", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48e89db3-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907931, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907931, "uuid": "297c98ad-b977-4868-93cb-0c931cce252d", "comment": "Malware payload (Mirai)", "value": "6c0191cc2abc1280b67b5bc3468f9903", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907931, "uuid": "16354cc3-ce40-4560-beb5-42fe0eb1d942", "comment": "Malware payload (Mirai)", "value": "e0421bae0ff07929080f9e8d02ab3b6a0ba7af9a7714b64df1107a1c9f923c7c", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907931, "uuid": "ef11951a-892c-4e7f-ad70-af17de73024a", "comment": "Malware payload (Mirai)", "value": "7504ea0f4a3848176adf576691bde497350c8ea1", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907931, "uuid": "e07d692a-5b59-491a-a7ec-cac8513ae417", "comment": "Malware payload (Mirai)", "value": "464020a7ba1ed478d827421ea99b4f76d969dc87275c6dcee90cc6bc68255e40d97700ffee4bddc95b9cbed4d363994a", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907931, "uuid": "3c06f307-4cf9-40f1-9714-3e5d3e2bf7ed", "value": "T109431917FAC190FCC08AC1340B6BBA3E9D7371FD1339B6A967D4EA262C95E615E09D40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907931, "uuid": "94d49cfa-6ef6-400f-bd53-6f8a7b935f09", "value": "1536:neCwO+BGEBBJoc974DXzOQb96+9cAcY7j0XdKguTD3em6Du:eC3IGETJWDXpb966Jj0XdvmOm6Du", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907931, "uuid": "f241661f-762c-457d-b2bc-e502c27b9bb8", "value": 59296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907931, "uuid": "d2746d25-58da-43a1-9cb9-d0d9d0c96120", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907931, "uuid": "96b64e66-f313-421b-9a7e-52551177e120", "value": "6c0191cc2abc1280b67b5bc3468f9903", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "989502c2-1e1e-11ee-b3cf-42010a9c0076", "comment": "Malware payload (DCRat)", "timestamp": 1688882725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688882725, "uuid": "d89eb53e-3917-430e-b486-084a81645f75", "comment": "Malware payload (DCRat)", "value": "160bfed9c3af626a87d78b19547852cf", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688882725, "uuid": "eb0af1ef-9152-4cf1-8189-b024759a914d", "comment": "Malware payload (DCRat)", "value": "e137ea8527c746d8777527aedf761e827ad5f51c61f8017e82edd62f4804d44c", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688882725, "uuid": "660cc1c9-e2be-4895-a038-20a4f3d6e74f", "comment": "Malware payload (DCRat)", "value": "9e6f9d21ce7e31cc61a3124af45b8fa0c9132fe7", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688882725, "uuid": "c591199c-7213-474d-b8a3-fe19f82b1e36", "comment": "Malware payload (DCRat)", "value": "187b7663da591052acc06eb116bbfbd70b7bfbace3e425d2bafd8db40ee743398bea1393a678443f8dab78c820615290", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688882725, "uuid": "52caefc3-a325-4744-b8bb-696ea957b3b0", "value": "T16F05D5017E44CA11F01D1233C2EF454887B4A9516AE6E36B7DBA376E19123A73E1DACF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688882725, "uuid": "9fe12137-3c40-4898-966b-8ba3aa7cb31b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688882725, "uuid": "f16ebadd-8157-48e0-9828-9b90ae91d3f1", "value": "12288:KkavMpcIEhZro27XobTfwu0DraIZ6tAET8Ac2tUvBzU4RF7ER:KgpcIEhS27XobTou0DraIYB8xFdk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688882725, "uuid": "72ff8ec7-2654-4857-b2fc-fa4912e01c80", "value": 847360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688882725, "uuid": "654e1dab-3db1-4624-95aa-c92f66b2c135", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688882725, "uuid": "2007b4c9-0134-4987-8e4e-b7ac22b1112b", "value": "160bfed9c3af626a87d78b19547852cf.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b12f877a-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884055, "uuid": "d517f281-c5cb-454b-9c53-12183ad97591", "comment": "Malware payload", "value": "aca8199513333f5f293e4465cd72c954", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884055, "uuid": "488804bc-20e3-4cfa-a54c-99a9bcd07603", "comment": "Malware payload", "value": "e141dfc05ea821775ef7c4e337d6468ebb68572c8a90d8704d62873db0ef949c", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884055, "uuid": "3ffbfb9b-c123-4e61-9019-1edce316797f", "comment": "Malware payload", "value": "6830b0174f89472a3822446df2371692fa766ac7", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884055, "uuid": "3bf03ba2-6d81-4a27-a8a6-48bf2d242c8e", "comment": "Malware payload", "value": "7567dbd4cabc9a96c2a48b1957ed934b52eacfd006078bde51662297708e2f1b734e698c9f5b097cc83d186e53164390", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884055, "uuid": "8bff7ccf-6778-4858-88fe-402162592844", "value": "T1CA06AE44EE808757E08218B3CE36F56DB36AFE920DC5DE07728D7A091DF5642A5C90EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884055, "uuid": "09633f59-1208-4a9e-8d0e-6541967ee816", "value": "deba71fcd4e68e93af678f2a5e291977", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884055, "uuid": "2683e0a3-1988-432c-9fbe-499bfad08629", "value": "49152:V4tj+s8KuqGaX0ToIBAUZLYHx+KwWJdbS0Bib3wf:+mJBAUZL+x+KwWJxZaU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884055, "uuid": "d38014d1-9005-473b-b42e-8e4cb19117b8", "value": 3878330, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884055, "uuid": "4af113a8-50b3-4a59-9acf-56a06a724238", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884055, "uuid": "d04f9d7f-7926-4892-908b-2199ffeed728", "value": "SecuriteInfo.com.W32.Agent.CE13.tr.5254.32139", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "173aa9a0-1e0a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688873918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873918, "uuid": "cd81af2b-6a12-4f81-9cf1-7509f9974b47", "comment": "Malware payload (Mirai)", "value": "b45293c976387a423f3f8ede2ab2fcb5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873918, "uuid": "28278468-5eaf-4b9f-811b-2578097f4379", "comment": "Malware payload (Mirai)", "value": "e1c4d7c85f4b2e8fd175a8cf7a14a8c652e659e4ec90fd873ab74f5cafaa9042", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873918, "uuid": "834eab5e-4c2a-4f37-8cc1-ae93130a19c1", "comment": "Malware payload (Mirai)", "value": "07f5eec2453aa386314ea633b32f0c97dffae4d0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873918, "uuid": "7f572759-ab0f-4f8c-b3c2-56164de24f95", "comment": "Malware payload (Mirai)", "value": "2b6f7d3b087101affc78cd194365a9a3845d61c7bb42cecc2548e12ccee234101242661de5b9da987f873523b441061e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873918, "uuid": "f4deb6cf-f32f-41fd-9ba1-8be9f4c8a784", "value": "T1EA531881B881AA39C7C05777EA9F108E3754A7DDD0DE7243CC140BA17ADA90F0D67B5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873918, "uuid": "a8024a01-2a73-4ccc-809a-091bdddda4a7", "value": "1536:6/CkLP5gethuVsKm0qrn9gweZW2zGeHg:6/CkLPieH0An+wwDGR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688873918, "uuid": "172ce395-3c23-4d06-8ed3-dd403bcb2d01", "value": 60812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688873918, "uuid": "5bda3fc7-53af-4aae-8226-7ba183f12cb6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873918, "uuid": "488f853b-ab40-46f2-a00d-961888663bfa", "value": "b45293c976387a423f3f8ede2ab2fcb5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66fb0c8f-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907982, "uuid": "be92d81e-be74-4abd-9c4f-fb1fe3e83cbd", "comment": "Malware payload (Mirai)", "value": "dfcd040f5fff3c911cdb4da7a940bb15", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907982, "uuid": "dd4cc7ef-35d3-4968-9d6f-5e3cc43646aa", "comment": "Malware payload (Mirai)", "value": "e1e572344ab25cf3696a004ec0b035827933881772f95f4bfa2c34e642a112fd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907982, "uuid": "d427daa3-0f83-456d-9866-5a416c16874d", "comment": "Malware payload (Mirai)", "value": "52277f54cf2b775ac71be58a9cb8eaaec15d7a46", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907982, "uuid": "b06b1c44-8648-4ded-8af1-d44c881a2a48", "comment": "Malware payload (Mirai)", "value": "134957f553db29281a40b93e20b340d711bfbe08dbda6ffdb009e83e2c01abeaff252fb0db77979d83254b18ab503380", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907982, "uuid": "cbb22cc6-16bb-4363-a2b7-41b2db3ac38c", "value": "T1BE335CC4F643D8F6E95705702137FB375E32F1B81119DA83D3E8E932AC96681A506BAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907982, "uuid": "bded753c-0595-43e6-87f3-f86e956578d9", "value": "1536:kgbCwwvH9+mpiI5wLgoitjni3F1K/k0anYbuOgSOO:kmCwwvH9FpiI5xFYfkk0IU3AO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907982, "uuid": "605dbd3a-eade-4727-beb8-211ba117d3d3", "value": 54448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907982, "uuid": "e46c0d84-fe87-49ec-ad2e-1a368c4f7270", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907982, "uuid": "795ec799-74fa-40a7-948c-729f905a5e0d", "value": "dfcd040f5fff3c911cdb4da7a940bb15", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c35d79d7-1e04-11ee-b3cf-42010a9c0076", "comment": "Malware payload (DCRat)", "timestamp": 1688871630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688871630, "uuid": "154c23f9-bd75-4b0a-8b87-6c8ade0b3ddc", "comment": "Malware payload (DCRat)", "value": "cd579a218e1c6a888b9a8b1d14e4f8a8", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688871630, "uuid": "ce52b613-9397-46da-b452-4bb12f22fea5", "comment": "Malware payload (DCRat)", "value": "e2a2f21082087a394a5845f552e6cfe7836ba421601758ce4b9a42dd4d1c2408", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688871630, "uuid": "3ed63636-fbc0-4b71-a95f-51cc91be163a", "comment": "Malware payload (DCRat)", "value": "3f994d2553762da089330fc1e4bb0a0f22ea7bd4", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688871630, "uuid": "cd395b14-9b9c-4a14-a75c-89299efed0c1", "comment": "Malware payload (DCRat)", "value": "765f316f76056049a1460b6d5574430c1349e459ee4a9d89b4c7e2bcc292dc44b335124bcd6728aab87cf91a15c7640b", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688871630, "uuid": "5f72ee33-f68e-43d5-938d-4d923b208d72", "value": "T144B5CE027E44CA11F0191633C2EF464847B4AD516AA6E32B7DBE37BE15523AB3C0D9DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688871630, "uuid": "465931ab-1e51-4381-96c0-9b8d7b19d532", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688871630, "uuid": "0ce7bd95-64f6-406e-a169-1a8269544017", "value": "49152:ypF+Bkwj3RPrEPgNIhrYGFkw/XagWZSS+:y2BV3ZrEQIhUokQjlT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688871630, "uuid": "1aaee407-2a4b-4669-8f36-f7010fe8921e", "value": 2403840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688871630, "uuid": "087f3309-020e-4833-84c1-14c697092ae9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688871630, "uuid": "0514b28d-e238-4149-964d-e9b7ea3a172d", "value": "cd579a218e1c6a888b9a8b1d14e4f8a8.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0579aa0-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884053, "uuid": "5fc9024a-d686-468f-87a6-ab37c67a5f44", "comment": "Malware payload", "value": "1e57a9c2ad9e89741154500537781be8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884053, "uuid": "9dc01933-3280-4f61-bab2-b1ebc99c5fa2", "comment": "Malware payload", "value": "e3f40d714c867ea0f1dc4437f464b5cb277ac69e1d3a849b5114d0c67e53d46b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884053, "uuid": "8748f9ba-e5b2-465c-8b65-3d6f63346b3b", "comment": "Malware payload", "value": "c2a90ea8005642a14f32fbdb06ac62179e8692a3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884053, "uuid": "7f188900-461d-40fa-83bc-f860300771f0", "comment": "Malware payload", "value": "b9207b17469e2b21d5a85d3eda4237ca7398519f73687377a67c714520d99b9db2d7a572a8e64d8303a84213364ecedb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884053, "uuid": "ba425c04-fa7f-4fd8-a2c2-66a70f14f93e", "value": "T1155301BC269F05E1F46AFC325CA0DAA65BC416CE9F89825BC05C38C1045B7B760DEE99", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884053, "uuid": "88a6c753-d1dd-4cc4-8bd9-469505dc3177", "value": "87bed5a7cba00c7e1f4015f1bdae2183", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884053, "uuid": "a1ffabcd-23cc-405e-9027-840e8ba64a61", "value": "1536:mDnl8vRp62nAq5qm4nxk4ZsjgaxxQwLjUCAfqy2ujirQUi:mDqZp62nAOKW0aY2jQiPi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884053, "uuid": "5a34b522-a8b5-47ad-a5c8-2198766347f0", "value": 65536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884053, "uuid": "38ce7074-c9a8-4b7c-b119-b412a6f0271e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884053, "uuid": "2a8488d1-fc26-49aa-a100-34060baeed15", "value": "SecuriteInfo.com.Packer.Krucky.B.eeW@aGRgLdo.925.17103", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "185d11ba-1e5a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688908279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908279, "uuid": "5878cd56-6b80-4430-823e-2e6479b5777e", "comment": "Malware payload (Mirai)", "value": "516002e1eacbe3931e740747eead643a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908279, "uuid": "94f20196-0d2a-4e75-ad79-899e9c185be6", "comment": "Malware payload (Mirai)", "value": "e641d02f1a14fe79a0c445722ffc8b78a50444b96a8b2a11bf8ba1ba90fce3b0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908279, "uuid": "2293c5dc-e9b0-49e6-93a1-8597ee004064", "comment": "Malware payload (Mirai)", "value": "d4e7a0daef54561271eb0653fa8d695546db89e4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688908279, "uuid": "02bb96e9-fa0e-46bb-a09a-15c614c4b036", "comment": "Malware payload (Mirai)", "value": "d9131390b0251f48ac48bcf46ef73e18345931e44e71cec7110f65f7b621b10afc82f826f7638c3e0bf8b1265d69168e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908279, "uuid": "b9e84273-9896-416b-80d3-3a2e8dcf640c", "value": "T1C3D2D08877D353FA8C8DCA7D731E003A7099B4E9A6B29373B306D5434766180F692E8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908279, "uuid": "42d92587-1e3b-49d1-929e-0aa3cbaa3170", "value": "384:MJd/PxEDLd2TwURz06lowYcEaqsD9aC450LQixBfE4jdlz0lewZ90BKsCU/KpNyT:+lxKd21RhxEnsD16IHE4RlY9901C8KaT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688908279, "uuid": "2aabbe24-98a1-4ad5-9cbe-db442f96399a", "value": 29464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688908279, "uuid": "bfbde470-ee95-4ed5-a145-5ea778dae6e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688908279, "uuid": "4df8c575-8e50-45a9-b066-08fe2f5ae4d0", "value": "516002e1eacbe3931e740747eead643a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "032378ec-1e0a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688873884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873884, "uuid": "8275a542-c992-456e-9f61-5ed43584225e", "comment": "Malware payload (Mirai)", "value": "423e5ff7933c67fe7d489c769b091fdc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873884, "uuid": "b4b859f1-39f6-47ea-bf25-c20cb5d6e0d5", "comment": "Malware payload (Mirai)", "value": "e87c0a485b9d456a55a02876bd2dc09e48e8de927f64d0d4662e43067c64c591", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873884, "uuid": "dbcf580c-bd4f-4853-bc62-3147180d0d43", "comment": "Malware payload (Mirai)", "value": "64faee47d132cecf6d338cae5a88c0fc5374c0d0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688873884, "uuid": "ebcdc1b1-da22-4c45-80fc-7037ff90efaf", "comment": "Malware payload (Mirai)", "value": "6759a5386e704ff2e14268551668b5c042815a0f110caea548f182b680a2b4c4f40c890dd132dc71dfbefece46eb3a19", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873884, "uuid": "a89631fb-f479-4fa2-8c2f-b838b79b13df", "value": "T1D6333ADD64012E2CEAD658F990774F0ED9511212A0A3171BB3ABFD8339332A8FF56949", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873884, "uuid": "aa68fe11-1dd3-4d00-82f2-8f826b5f6c69", "value": "1536:7yckBEhm9yWY68G5QtGkHut71Anhg1pN/X:7a8Gm4rAQpNv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688873884, "uuid": "c0932c0f-53de-4923-b1ac-2bbc7eeae202", "value": 53892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688873884, "uuid": "84b275a3-6724-4a92-8ad4-4cb794943388", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688873884, "uuid": "16cf5166-21cb-4f4c-9f11-8c407e454952", "value": "423e5ff7933c67fe7d489c769b091fdc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "130b9e7f-1e3f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896674, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896674, "uuid": "11b56b2f-7578-4f52-bbca-394f52878a17", "comment": "Malware payload (Mirai)", "value": "86283c3de56904540194c7b6fbb103f5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896674, "uuid": "e16e521a-6831-45d9-a0b5-d4ff429ec957", "comment": "Malware payload (Mirai)", "value": "e8f805fafd19d5d3762c94f8de4b684c6b07dd9153c784ea71024e28a4a47140", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896674, "uuid": "23eebfeb-63ce-4576-a7ff-357eba1b862e", "comment": "Malware payload (Mirai)", "value": "80fa5538295f77c75f777a110cca3b7914025ca5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896674, "uuid": "be374d75-bd56-4f8b-bef1-e63374748350", "comment": "Malware payload (Mirai)", "value": "621987fc20c8664caafea22f6af416e1407c3b9d9ea3f2fe5590a5f0bdff5ed6491b5fdeda86825f6b0d03ca67c07192", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896674, "uuid": "707807c8-f3b9-457c-8924-c53996a0433c", "value": "T18903F19DB71424F5D64FA1F506F90BA63DF00BE3D883AD015EBAE666497366838807D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896674, "uuid": "24fcfd73-8e21-4c59-b0ec-2a3520ff1caf", "value": "768:HIIf8z2W7y14x91dgHRH0CiU3Ki3H2TlfXMIvGJgGlzDpbuR1Jmd:HIIxT1oVgHRH0Cini3WXTyVJusd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896674, "uuid": "1cf78a60-f74c-4d72-9692-ef59aef28caf", "value": 38520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896674, "uuid": "ae0059b1-493d-46f5-bd04-5be2970dc199", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896674, "uuid": "51ae9079-ddb7-4e1b-9e26-35f997f4a345", "value": "86283c3de56904540194c7b6fbb103f5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b60b3544-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884063, "uuid": "d5081d4e-021f-412c-9af5-c76ff0d5c4bb", "comment": "Malware payload", "value": "e222051e1dc99015b7ee5011dc492463", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884063, "uuid": "1dd123f9-5e68-46dd-9cc1-6db5b3ad1a9b", "comment": "Malware payload", "value": "ec2891d70a516f6b5d4a69518a84285edf5f436bceea840407a7b62032f59abc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884063, "uuid": "9fbc4d85-8fa4-4320-bd89-171fd8505fbc", "comment": "Malware payload", "value": "262f3ee9c02b31e54c645a3a1123c1df70793012", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884063, "uuid": "345cee8d-d5f7-48b4-b26a-c5af3a49aff7", "comment": "Malware payload", "value": "389eb05b348033f5e2c594010e3ae7162292816bccf7801286810ec6544870a833c6b68bea1ec803cc970d70ed263091", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884063, "uuid": "82b2345c-bce1-46c4-9b9a-841d7cd37e81", "value": "T156C38F01DA838176C9858F70504EF7BE23BFFF802A35E2D7C79A5C717968902A185D7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884063, "uuid": "e8add247-388b-4913-a921-d302a5607b54", "value": "1536:hTBlK/IeyKsxYRmq2I0vCbsx/dlFUz5FRpv7NKR+qz3PnX0B:hTB+IeyKwYRgKbsx/oRk7PnXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884063, "uuid": "1347183f-85b1-4294-a0fc-d6b0c9c83530", "value": 118784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884063, "uuid": "cd7d5062-2022-4eb2-935d-5b658a83a681", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884063, "uuid": "fb10f3ca-54a5-4609-b083-70732fe249f2", "value": "SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.18958.29097", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ca5f509-1e59-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688907938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907938, "uuid": "43e06935-0c61-4482-9105-1c95a31a997b", "comment": "Malware payload (Mirai)", "value": "ed2a3fcf9c27a7ed9c1e102698074bcb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907938, "uuid": "78d2c3ed-0bb1-4446-9f09-b4e6dd324ed9", "comment": "Malware payload (Mirai)", "value": "ecb953bb61bfb4b39d7af7a9c2c4773b7041aa8c5f91ad159b9bae3f0cae7edc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907938, "uuid": "04a818ce-df8c-4d95-9e9d-ade6ec2b6971", "comment": "Malware payload (Mirai)", "value": "2029f4ab8688456620da43195163cdfa54f235fa", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688907938, "uuid": "f5f17f24-d3e4-472e-a709-087d109cfb09", "comment": "Malware payload (Mirai)", "value": "07884a7c3e4b6ce6e061a477d616ec1f3a36312d7437a6bb2ecf9a718fd4ff683137d3414cf7e5062592178e0dbd94a7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907938, "uuid": "180e5185-c662-4a03-b470-0a5bd5aebb67", "value": "T101436D02B21C0A57C0A31AB03A3F5BD193FBAAD022E4F785256F87969571E375582FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907938, "uuid": "9ccaccf8-5e5f-40ae-9831-aea825082046", "value": "768:ChFRHA9z7oBRG0DL2gE8C2Js5FVeU95Aa6McYEKI5HDUFR4tUHwwrUaIv5:IF4cBR9q8C2CFh5l617KI1Y4mRrL2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688907938, "uuid": "d1eb80cc-2142-4eb0-94bf-635d6ba3de39", "value": 60320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688907938, "uuid": "d1fe914e-9f82-437d-b38b-955cade6fc14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688907938, "uuid": "5682f271-ddd7-4e9d-a65f-84f6c167078e", "value": "ed2a3fcf9c27a7ed9c1e102698074bcb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc25dfc9-1e02-11ee-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1688870812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688870812, "uuid": "74013c28-d7a6-4d29-8ff8-05b0765d0948", "comment": "Malware payload (AgentTesla)", "value": "016bbb3f7e72cb4d011c3bed3b0470e8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688870812, "uuid": "01f702b3-cbd2-4404-b89b-9b96df74e013", "comment": "Malware payload (AgentTesla)", "value": "eed91785114f1809e10662f0d0e7a95c0d577758fa263fd441bb29e361d1e4fd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688870812, "uuid": "e54f2db1-6814-47ee-9a82-cc8c5d4948e1", "comment": "Malware payload (AgentTesla)", "value": "39fc60a0940e8be6cf9fd2f43aab62175f8d6d4c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688870812, "uuid": "0e021545-4c73-45d5-9df9-387333aaafce", "comment": "Malware payload (AgentTesla)", "value": "4d2b43e359babbdd581f712b49d9a74024cfbdd6683c9dc9e9e8221aabd184815828db38118dd629faa7988d84c3ecc5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688870812, "uuid": "3571574b-18d8-4ca3-9804-75b4158727fe", "value": "T187D45B3C1CBC7223C170E2B68FACC461F654996B3D619E3765D3989A061ED0269C7E3E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688870812, "uuid": "4cbe3c17-7ad0-4ecf-8a68-5f31531e7bff", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688870812, "uuid": "cf7cfaf2-1d73-4a3b-ae79-b3c9756fb3e0", "value": "12288:UCKPaI5amnYra9pVYAqfJyridezVt35mdJPIiQBoB:UxfAra9pVyyrN4/PIif", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688870812, "uuid": "c7a23ff6-ff96-4ff9-8ff7-43f7c5a97cc3", "value": 609280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688870812, "uuid": "b2f4a767-f61f-4db0-909e-a60a0d9d688a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688870812, "uuid": "550f0569-9e69-43a5-8173-d0d3a58767aa", "value": "016bbb3f7e72cb4d011c3bed3b0470e8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39c2a2fc-1e7c-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688922938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922938, "uuid": "93a22b2d-a8e0-49b5-ba00-69afe702399a", "comment": "Malware payload", "value": "9ee98d28e34951c3981bc3337102b8be", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922938, "uuid": "0acfcf2a-170f-4754-b0ba-2dde6f078b35", "comment": "Malware payload", "value": "efa18a1f2e4958cb72beb9b02662dc674467af4dbf74eef433922150aaecfbbc", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922938, "uuid": "80e28a94-d667-4fa0-b828-25e01b5e3c22", "comment": "Malware payload", "value": "fa5eca18bb2f2b21c2d8622fbd5c4592eea6df5a", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688922938, "uuid": "4259d771-dfec-41fc-b05f-3ff70b09e02b", "comment": "Malware payload", "value": "36a7cdee5d82050fcf8c7f3587fd4599566a71247e15adb84ee617864c3e9f8bea3ac58b70d4c758598e28dd0ca97221", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922938, "uuid": "360ebd6b-dca3-4b09-a45f-1f179e7aaee5", "value": "T176C30987AF523FB7D8CBEFB796E9D70420DE98022765272570B4CC70A21E98E14D3568", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922938, "uuid": "975e1f99-5157-4a3c-bc89-7d87c90c82a7", "value": "3072:evhg2bAxoWMuFFt3/PAYbBKCSwB5O1i4I94:Ah/bAxPFt3dYCSwB5O1PI94", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688922938, "uuid": "d791da64-262f-4489-852b-650e06d2e390", "value": 122503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688922938, "uuid": "1bc63811-35aa-480a-b8a0-8d9aa5bcd7b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688922938, "uuid": "79e3850b-6a6d-432d-82af-942d3095dff5", "value": "mipsel-20230709-1715", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5679898-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884062, "uuid": "2d50c672-c1db-4ccc-9359-6ed871535b70", "comment": "Malware payload", "value": "df4783b099cf548945fe5a1dc1b6d2ed", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884062, "uuid": "81d8cdde-3657-4028-a2ff-0d568d0a931e", "comment": "Malware payload", "value": "f207d871b120318504f7769b7617bc6141058763a3352d6b2d94ac93e1424ebc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884062, "uuid": "fd78e735-e547-476b-b74e-77604cc1245a", "comment": "Malware payload", "value": "4958452e60a0750a5d68145da6f71590bb26d602", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884062, "uuid": "24d7ac10-2b93-48bb-9e86-35f38fb23b2c", "comment": "Malware payload", "value": "235c008cd57a52c5438a45ac5dad5c13dfc1926e7478de098baf530580413346d68ae96108b708403529c6f8704bf50a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884062, "uuid": "05bb47ba-1897-4823-a3d1-ca17f803b6be", "value": "T1C3B37D19D3CB83BBD0820F30947D8AB7713BFFD43B619656A2C91F296A6C5C19810B36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884062, "uuid": "91ec7d90-1ed8-4fe1-b385-dad761471cd2", "value": "1536:fSYl7Z4nbkTxc0bCo3sO+FxWPnMwkh/2ZuPsb:fSYld4noT60bCo3OxWPn6hOOs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884062, "uuid": "fe67a8cc-d9c0-4340-b7fc-545420669599", "value": 110592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884062, "uuid": "104611a0-20be-459f-a402-a56a5e9d6b89", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884062, "uuid": "4b512aa8-43d0-418f-8a90-b3e0c1b56c13", "value": "SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.9431.19526", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f5be631-1e3f-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1688896668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896668, "uuid": "92eca61c-62bc-44a5-9730-3a28812552a3", "comment": "Malware payload (Mirai)", "value": "f05fda5b2369ae7b15b95b5990995943", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896668, "uuid": "d859444a-5e2d-41f8-b514-3fa801dce3ad", "comment": "Malware payload (Mirai)", "value": "f2630e90fe0a3971e5e83327c7e3a499da390581950948d1c0b7866c07ec9111", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896668, "uuid": "f4e8a89b-a78d-4084-b056-101092a59f67", "comment": "Malware payload (Mirai)", "value": "700354f7dfd6fb4d545c2739dcda3671768439f3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688896668, "uuid": "68826364-b731-40d4-a317-f52987e18bae", "comment": "Malware payload (Mirai)", "value": "f632002b8c620ad213441c34ca0bfb338ff9bdbd2103da7894516de241fb396b89a690e6e42f47eff43f0aa46836a32a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896668, "uuid": "b75143cc-6428-4736-a23e-e7c8183c32c0", "value": "T17DB35D24B83D2F26C0E4B57F11BB8755B1E2278D26A4C58E7DB20F8FFF2164068166B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896668, "uuid": "e351a530-a0fd-40c9-aa49-ab0c7a7c44ab", "value": "1536:3Op1NImnfJfI5S+5/SjOitu+5ewg6cvK8XHvSelDDetHofEvp8zbcg2VGr6vJNIa:UIIE/sZklwFyMmfceGvJqbzgp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688896668, "uuid": "34660d19-5bcc-41e0-8216-9dd097c39649", "value": 112488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688896668, "uuid": "fde667b8-8504-4280-94f5-2269c5de2a07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688896668, "uuid": "529e8281-dc09-45e9-a467-46d2c8a5c80a", "value": "f05fda5b2369ae7b15b95b5990995943", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac7b55d4-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884047, "uuid": "3cc5cc72-15c0-4e21-841d-b88f1503a120", "comment": "Malware payload", "value": "3b95fe919d376941cc7826f8f04084be", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884047, "uuid": "876d19a0-faa8-4ea9-a48f-1788c71faab2", "comment": "Malware payload", "value": "f5e89996e06a738d144cdddc9dc8353638bc4a40d7661d346d02548ff726de37", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884047, "uuid": "d2a272e5-b241-4f3f-b318-d4f2cedfa695", "comment": "Malware payload", "value": "9d7192eb0e3e3c5a860dc2d4e3bbdfeb799a7e6b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884047, "uuid": "a0175495-4708-4556-ba30-0add05c2a780", "comment": "Malware payload", "value": "0acaae6fb622a3af9accc6b0d8fb6335b1e0c081ff5bc827f7fcdefcea5f107f11df8f446275de138c1e82db69a37f85", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884047, "uuid": "8cfd5891-9815-49a8-925b-b7556a635d95", "value": "T1A1241249AD764D34FDF47A7E317704A54BAEA2CFA266802D1FEC2DCA580344CB214E66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884047, "uuid": "036ee4b0-38c3-4208-a168-ec1620e7d76e", "value": "3072:xlIeJ0LlNNTArvCytmAZrM8u68c5eAn91cZxc4ir7Jv1hGTG73/M:p85FytxBMe13cZxFirtqo3/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884047, "uuid": "b4e44228-f72f-4a79-a1b8-93cb16002f80", "value": 228732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884047, "uuid": "59034c94-d2bf-4d78-bc0a-610d8aa1fc3a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884047, "uuid": "0b768a08-7aa6-499f-81ff-54293e9a5448", "value": "SecuriteInfo.com.Win32.Pinit-I.16062.4431", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1658d1b6-1e43-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Cobalt Strike)", "timestamp": 1688898398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898398, "uuid": "f7889bf0-c35d-4296-b24e-cb4f2e129b96", "comment": "Malware payload (Cobalt Strike)", "value": "a88ba8cc2624297095ed8fd2e5fd82b3", "object_relation": "md5", "Tag": [ { "name": "Cobalt Strike", "colour": "#47EF09", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898398, "uuid": "9622032a-308b-46a0-a474-b4a60d77b118", "comment": "Malware payload (Cobalt Strike)", "value": "f6c2a34e3a85581ae83b048b0e66efd5bf6afb895b09ee4c38e61a219c549847", "object_relation": "sha256", "Tag": [ { "name": "Cobalt Strike", "colour": "#47EF09", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898398, "uuid": "ae749ff5-6daf-4a45-88fe-7c4e67358626", "comment": "Malware payload (Cobalt Strike)", "value": "d448e0404422b42ed5d339176acdab82a2e8207e", "object_relation": "sha1", "Tag": [ { "name": "Cobalt Strike", "colour": "#47EF09", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688898398, "uuid": "ae8cf57f-6659-4a93-ac7b-ecf2f19d962d", "comment": "Malware payload (Cobalt Strike)", "value": "3cd0092a3d2ec024b0cecd4a8a4e368a4cc615d236487441fe2d9c65cb487fda7edf398c7ebf057ed84e9e138ecb8589", "object_relation": "sha3-384", "Tag": [ { "name": "Cobalt Strike", "colour": "#47EF09", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898398, "uuid": "d60866a7-b977-45fb-b5a9-1294476b513f", "value": "T172E407C03756DCBBF896B03499414410BE6EBEE6F6D286DE12BCA20A4D3779058F8D17", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898398, "uuid": "e28a8a82-8f22-4dd9-9ae8-45e075fbbcc0", "value": "feab990e57f5d1cbc0b20788b5084545", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898398, "uuid": "631b0bf4-b496-4031-962e-c78f5f531a58", "value": "12288:hNh5vbpurvJl6Sotbq44qoN/QZDtrLpjr1VMvv4JMJMPIAOPBEvvJw:hNzu6SotO44qyQZZrLekKsJw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688898398, "uuid": "b1d6eb16-58e4-4f97-b84e-7e0f1bfa1b2f", "value": 696944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688898398, "uuid": "e9cace08-164a-4ae1-94f4-51394680f758", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688898398, "uuid": "2377413a-4716-42d7-8752-1a37e2ba258f", "value": "a88ba8cc2624297095ed8fd2e5fd82b3.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3926e3b3-1dec-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688861090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688861090, "uuid": "fec69d3d-e292-458e-83f9-5b76b25136ee", "comment": "Malware payload", "value": "21460870223c4c36350f28b0e11b91d3", "object_relation": "md5", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688861090, "uuid": "0037f136-ff51-4779-aa4f-5168b58c1917", "comment": "Malware payload", "value": "f8283505df61ac1efa31c031a442a7444d90fb0736dcf15eb3e32dd01b677b44", "object_relation": "sha256", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688861090, "uuid": "f92cafb1-8fcd-4546-8150-6c291855f1a4", "comment": "Malware payload", "value": "089f3e22a59c682b12195f1afa1f203f37adc998", "object_relation": "sha1", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688861090, "uuid": "0718e58a-17fe-4385-b0b1-00e3686cdc31", "comment": "Malware payload", "value": "9ebc64600b3be4f6ee2d37d1d16bc551cbcf9fa46441833c4f3c0247b88cb96300e16868b0c85a79e00caf883e3d4f8d", "object_relation": "sha3-384", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688861090, "uuid": "7a3e4782-4698-43e1-9bcd-40dacbef84dc", "value": "T162B02B09940FD00B402000C401B2C10DD86004A53900430082D4C80C3960616454A3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688861090, "uuid": "90daf32a-8474-4380-aced-2feb5dd10177", "value": "3:VfX9GTfmQKn0eFH5OGpE2J5xAI3Ijc0VaRt2TUfF:VtGTfmQolFHIGq23f3BsC1t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688861090, "uuid": "e9fba131-e708-4790-8254-463ee8525934", "value": 129, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688861090, "uuid": "60525b17-244a-45d1-b29e-bbb949478c80", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688861090, "uuid": "0018a55e-331b-4304-8d7e-05d0883e212d", "value": "HBankers.vbs", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4aa3998a-1eb1-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688945730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688945730, "uuid": "44cb0809-bcc1-4046-b3af-f48000651895", "comment": "Malware payload", "value": "3fc4e5e66311351fc0c2654a94b87fb2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688945730, "uuid": "78ff41d6-4a0e-455d-adf5-3375a60ace36", "comment": "Malware payload", "value": "f938bd23b3f834f0548463c4479c53e68a622f08078412d73c3931e9bcc80120", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688945730, "uuid": "17054bad-4697-4873-baf1-8c43da361c74", "comment": "Malware payload", "value": "00829f429a35ab67ac0c37b09705a44b4e386a36", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688945730, "uuid": "16d9260b-866f-48e1-a9dc-4560e7746a6a", "comment": "Malware payload", "value": "9a0295fdfd14d749c3ec57ec98f74da595d8b31ae54b673b14a538f4124d6596d1cc1db53793ae5edaf9a511ab5f4f5c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688945730, "uuid": "08f212cc-b56e-4d75-8e58-73ef905a837c", "value": "T160222B048FFC412BD4DA97BCCCA711421637B6B57623EF2766AC82991C623D126273B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688945730, "uuid": "fb20b0f3-f3f1-452e-a14e-ebe8948acfc9", "value": "192:bSHXwiZU4MqQHlClnV87Mf7/6GK3bFx1/:GHVU4MbUloe/6lJX/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688945730, "uuid": "4dd2f4a9-9d79-46da-89d1-86bfe9dfe18c", "value": 10752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688945730, "uuid": "f6f2c12c-96b3-4936-b744-04683334873a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688945730, "uuid": "a1dbac94-9188-4206-95b4-14e569f109e4", "value": "SecuriteInfo.com.Win64.TrojanX-gen.10569.16452", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adbe3a4c-1e21-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1688884049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884049, "uuid": "3a63b67f-73f4-48e5-ad44-1888ef12b44d", "comment": "Malware payload", "value": "ec3d8f8f77140cd3c8c7188d040a06a1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884049, "uuid": "d03e1170-49f2-483b-af75-758807f23f2d", "comment": "Malware payload", "value": "fb0a6bb5f45d8937a1ce72c9e031d6591c1303cc2d3e76b7b44440798caca02f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884049, "uuid": "a0f6dac7-1626-4469-8051-b78c8c4f8c49", "comment": "Malware payload", "value": "d22cd023e18131665131957296029ddc0dd4cdb0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1688884049, "uuid": "ace5355f-1253-47f0-9904-d707bc2f8cee", "comment": "Malware payload", "value": "783cf8f8f8756eb76b4921a62cbe5f1c1ce9a10e3b06265970f00d1e5956ba943539f389914b7446c5f4abacf3530a8c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884049, "uuid": "0b757cbb-438c-4e9e-8585-17f6e914705a", "value": "T19635334FB658EA8BD4DC0EF180C0DB9775B73E05AB3A6617F7192B9CA98D086CC05643", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884049, "uuid": "ca3cdb4e-231f-4c4f-a547-ed3f80b138ab", "value": "7fa974366048f9c551ef45714595665e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884049, "uuid": "f178ba26-5795-44c1-a922-232b1eaf9746", "value": "24576:deeqdo7NH01/V/RoKoHcPKvZ64g8X5sMDl/eAV9YlZLZG:QxK7NUrGKbCvVgk0WYl3G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1688884049, "uuid": "c58d2767-88a8-4028-81e5-8df99b84d2d3", "value": 1108631, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1688884049, "uuid": "151eae52-219e-4c3d-b0cb-009d924c65a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1688884049, "uuid": "380316c1-8859-4f8b-87b7-c8f9ec1dd0cb", "value": "SecuriteInfo.com.FileRepMalware.29872.2080", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }