{ "Event": { "published": true, "date": "2024-02-18", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2024-02-18", "timestamp": 1708300982, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "301de3cd-4240-49a7-a503-e16ee7520fa5", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a21097-ce3b-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708246578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246578, "uuid": "a3a35997-a52c-40d1-812f-261d730c15a4", "comment": "Malware payload (Mirai)", "value": "caf4a18e806274c837ea68a1b34f6755", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246578, "uuid": "0ee25e13-dd46-4b6c-9f68-4af6b7f0d5dc", "comment": "Malware payload (Mirai)", "value": "01bdbcadb6b151562a7ff207280368ab9f77a976114494479415eec71d1a5b51", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246578, "uuid": "8057e2af-fe33-41c7-aa03-ab221d28d65b", "comment": "Malware payload (Mirai)", "value": "9d3a79b50941f32fc94a2f9a30dde2e2dc21f7bb", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246578, "uuid": "19d40909-7c9f-4105-9aef-a33a7f8e7be1", "comment": "Malware payload (Mirai)", "value": "cb6b1d781c8a3fa89d18fc832416089604636129f8cce85dbef1d68e6150c142059ece9c42140b4fefb1c53be6b72fa2", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246578, "uuid": "889ea05d-e077-4ac1-9e7a-49ce5e9eb36a", "value": "T123431917F94685FDC089C234177EBA3AE92331FE1229B26A67D4FB263DC6D611E09D04", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246578, "uuid": "845d8d38-6831-4504-98b0-81d14d54042a", "value": "1536:1XIY73si3qEToSRhIN2Q/K6C8u50pfEHwNLJ:2Y7H6ETRhID/Kn5qEHw1J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708246578, "uuid": "dc72b8bc-22b0-46c9-802c-abb710c10258", "value": 58480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708246578, "uuid": "f5803514-d82e-40b6-8d4a-74e07798722c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246578, "uuid": "a62a132a-aff2-45d0-9edf-f5c1514a7e6a", "value": "caf4a18e806274c837ea68a1b34f6755", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cad51cc3-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249676, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249676, "uuid": "56151eff-00a7-424d-93d5-1f86ea41ee1a", "comment": "Malware payload (Mirai)", "value": "e2f2ac0c95f8b554d15d1774b3fe126e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249676, "uuid": "b3162d5f-2d16-4e4b-b73b-8ff92a90536a", "comment": "Malware payload (Mirai)", "value": "02be5aec4237dba8f01527d230381dece5be5f239da331d6c8cf1615087d3034", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249676, "uuid": "3537fda1-1466-44c3-922c-9bcfea156de9", "comment": "Malware payload (Mirai)", "value": "eef27f65562312e62c550380e9faab342615d555", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249676, "uuid": "ee840ab4-39a1-41d4-a889-f39515839ca7", "comment": "Malware payload (Mirai)", "value": "6c76de9a72409b85cd76b477ad93ac641bdce386f89e96eb3473367107ac213b0b9538d4a91b36c7894e12a00f3c7a80", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249676, "uuid": "5fe5ae13-02d6-44bb-9a6a-35e2fef1bb52", "value": "T189E30A56F8819B12D5C111BAFE1E128E37131B7CE2DE72029D246F747B8A97B0E3B905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249676, "uuid": "75fd2f68-2ebd-48b2-8660-fe5b7a8294d4", "value": "3072:pUkePD6U2NFh5X0wcrYaaMos0TCOCW3b1RpD:pUHmlZ5XVcrnaY+P3b1Rx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249676, "uuid": "a5da73cc-c087-477a-b17b-ce369a00acc4", "value": 143292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249676, "uuid": "60c69f99-b34c-4234-ad34-e705366f1d42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249676, "uuid": "1099166a-af7d-4f7f-b7b8-c67bf6d9bce4", "value": "e2f2ac0c95f8b554d15d1774b3fe126e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1b17a44-ce7e-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708275376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708275376, "uuid": "068d48e6-0370-4757-bee4-a725463c447a", "comment": "Malware payload", "value": "aa6d0350d8cd6398ffcbc2e47284ec33", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trap stealer", "colour": "#84C8AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708275376, "uuid": "a586d7e9-bbd5-45f2-ba86-bbbd4bfe3046", "comment": "Malware payload", "value": "039fd82bdccd334917eac90b3be910f752e2f152b433771f39bf1744e6298ec3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trap stealer", "colour": "#84C8AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708275376, "uuid": "87912b2c-f3ce-48f8-b4a4-cabd1f2123b8", "comment": "Malware payload", "value": "f1833599da5f98e66e906e1b78b48ae7f70a970c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trap stealer", "colour": "#84C8AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708275376, "uuid": "cf8e9b0b-cb0e-4b6b-b069-7da7a4b3fb5a", "comment": "Malware payload", "value": "f47adceff1cac695050a1a044d23d19e86d8f43d3ce2f48690ba727a43005868bc8993200d78e7ca7bd3cf6b19a24f60", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trap stealer", "colour": "#84C8AC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708275376, "uuid": "7b2ba11b-939a-4c82-916b-5c9aeacfc5ad", "value": "T1DC046C0923E52066F0B66B7099F602834E367CA3AF7592BF1784957E0D33A84D971F63", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708275376, "uuid": "9b37a16c-1d06-4419-b2aa-48346e3b068d", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708275376, "uuid": "14fc3371-dba1-400a-883d-90e766c2d4d0", "value": "3072:oMobR7ezAjLOZvmX185GWp1icKAArDZz4N9GhbkrNEkkB04s:teR7eammYp0yN90QE3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708275376, "uuid": "c202cdbd-748a-4533-8022-8bb9eed634f0", "value": 188416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708275376, "uuid": "9658c778-c083-438d-81ea-e9e212efa5bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708275376, "uuid": "fadc3f3c-74e6-4c3d-9c9d-8d7cb5d0fb22", "value": "erg.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15055307-cea9-11ee-b7ea-42010a9c0006", "comment": "Malware payload (DCRat)", "timestamp": 1708293609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708293609, "uuid": "113a36db-e82f-4e3b-b685-1f499409e850", "comment": "Malware payload (DCRat)", "value": "3b854227cfb3de4686957a9fe66c8185", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708293609, "uuid": "61b90c19-bcbc-414d-be1b-1461a45d6f07", "comment": "Malware payload (DCRat)", "value": "087437817d3d61d126cd0ca6d5d6babcd39fb5c85a48b95c023878d124051da4", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708293609, "uuid": "fff0c6f1-7127-443b-8572-36cd69713021", "comment": "Malware payload (DCRat)", "value": "5c6fd411675ef73335d00c75133d1f595c238673", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708293609, "uuid": "448899da-e86d-4e1a-b9b1-b3429ccf3df1", "comment": "Malware payload (DCRat)", "value": "02ac231a5090213b9d75b5927e1716252ea64b7fce2d6da0c5f5f7e32cf9c9328b022adc984463f058eeecbbc7fa1e61", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708293609, "uuid": "53ae4b8f-6197-42d7-ab66-f0cc7e644c56", "value": "T170759D417E04CE11F0091A33C2EF55588BB0AD5166AAE31B7DBA377E65123A73C0DADB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708293609, "uuid": "f669e84d-a719-4395-aceb-0f43373234be", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708293609, "uuid": "bf0d4132-0b3a-4ef8-8fde-7f03d139aa7f", "value": "24576:CwWDbJiCga5jJ2+r/qXYpu+2worQlYfsZfto4H9qquY+fhlqI:qDbUIsZSwwoH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708293609, "uuid": "81db45e9-35f1-4dba-bd74-de097fecc960", "value": 1590784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708293609, "uuid": "493bf4c4-a41a-42cf-9757-6ab368f19de5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708293609, "uuid": "bc455bd7-6690-479d-bfdb-e3d249e0b7a3", "value": "3b854227cfb3de4686957a9fe66c8185.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fc4615e-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292070, "uuid": "0c6bd756-1853-4482-8aaf-d77de841f671", "comment": "Malware payload", "value": "ee37ddfa90358513fab21bee2599288f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292070, "uuid": "9900dee0-941e-4bc5-ad81-434631f216d7", "comment": "Malware payload", "value": "0a377515207ad82b8da0a5a291948fef3709bd120c528c7ee2da037c8ca629ff", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292070, "uuid": "16afed07-e316-49d3-ac65-44c83c3a3315", "comment": "Malware payload", "value": "e1b7b135e4549e849e4598958f97af95cb7bb50a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292070, "uuid": "b77cb94a-7fe9-4529-a7d9-e2f0aa4e94a3", "comment": "Malware payload", "value": "e6cd7ffe4107e054ca2bcf7fe070ef88188b9eeaafd70737f3d8d4c48bbe701b75dd80f550829339b2a550cbfd2be776", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292070, "uuid": "422a73f0-d51d-4282-9725-b176643e9518", "value": "T181D64A30C250DB16F2B395B44529974978582B241B3C15E719E4FCA93BF40E2ABBDE3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292070, "uuid": "43ed14b3-6702-4ef8-8d4e-7aedb78d0052", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292070, "uuid": "1a632087-0e82-4476-947d-168fbd82a1ed", "value": "49152:6FK021v7V3FEPLQ8Z7El6y4Gh0KooN7gvOg7ttXp22Zp22X222Hp2222ppBUuVka:6F5avx3FruYrh5ooeL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292070, "uuid": "46877f83-3ac5-424a-8ae2-464bd9db97de", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292070, "uuid": "990ef421-3cac-40a0-a5d0-aac3ea7a6292", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292070, "uuid": "9d03fd0f-cfc5-40e5-b7ea-b61bd8c83486", "value": "SecuriteInfo.com.Win32.BankerX-gen.3732.12099", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e985ee72-ce9f-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708289670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708289670, "uuid": "e0a687e2-6959-4ecc-b664-184df21c7a8e", "comment": "Malware payload", "value": "a587e517d8937f48456738a3faecb772", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708289670, "uuid": "ad9a8aaa-04b1-4d5a-861d-d48c060f77bc", "comment": "Malware payload", "value": "0b815bc9b2f428ecaec6d93214279980bd8394ea6e28c687db559f01e9c1698d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708289670, "uuid": "2195dadd-b97e-40aa-96b7-dae216db86c2", "comment": "Malware payload", "value": "d9fef9c1dd3068a20d7724d2475e29ca4db8fd04", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708289670, "uuid": "6583a2a4-f80d-4f93-b007-3fc22d3b7a3a", "comment": "Malware payload", "value": "bf10bbc521bf2700ec0672802f48ad1e1c5a299164608e8431ff9b969075874c2108dde7a6a32e64a142d03ee0b73f31", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708289670, "uuid": "03670531-1741-4d62-9740-d4bd5a312505", "value": "T155B6BEA1B74AE6DFC19B45B2E062CC03D6B897E68321A703EC98B47DDD13F8115C2B59", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708289670, "uuid": "ba7e9155-db6a-48e5-a25f-46dbd45f4a69", "value": "4328f7206db519cd4e82283211d98e83", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708289670, "uuid": "533b8b79-d3ec-46c0-833e-a1915dbf4d3b", "value": "196608:Z1ZYTxxaKXrPz9H2P/+BluqDpjiK299pl8sj864GjID4C8T:YsKXnVDRQKshr864GjID4C8T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708289670, "uuid": "20ddc161-5ee7-4055-b685-da114a2a61fd", "value": 11460096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708289670, "uuid": "106ce60e-e0b3-4368-9370-e0733f00a06b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708289670, "uuid": "b017a80a-59cc-4e49-9d65-72ad2fe41719", "value": "Client.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c2155cb-cea6-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708292359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292359, "uuid": "a99f6d4e-db84-4234-b120-7af1cf36d57d", "comment": "Malware payload (Mirai)", "value": "889be7613657840b1801e42decb041d4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292359, "uuid": "dfeb81a3-4da4-40ef-824a-f657fd57e025", "comment": "Malware payload (Mirai)", "value": "0d138eadbed337535bd4b241e1e2aa991c304c3bd066581ac056666ad7fc8bd3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292359, "uuid": "d4ecaffe-f1fc-4c12-beb1-4102d006a72d", "comment": "Malware payload (Mirai)", "value": "aa53b6b65b956ed58baa2350950fa929d918c42d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292359, "uuid": "5df3f21c-6eaf-4791-a56b-f34672ac527a", "comment": "Malware payload (Mirai)", "value": "684db59d257e13685b7af4af42e72242c478869ceebe84c9b05290a2e3639af0ef19d3d7180dd3a468c3fc21ae194bed", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292359, "uuid": "5f08a52e-ff1f-4805-b39d-cd2c21388a4b", "value": "T17AB39CDBF24702A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8905F96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292359, "uuid": "27219b68-3cca-4709-862b-85817c6668e8", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1Y/LWy:c9sSyzz36YaWWgg1Yq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292359, "uuid": "3beff57a-06f9-46aa-bd8a-a940655845e4", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292359, "uuid": "93b662dc-3344-42f2-bf71-467ebc3841ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292359, "uuid": "11da3a1b-c528-44b1-ada5-60334915530a", "value": "889be7613657840b1801e42decb041d4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76c284d6-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292055, "uuid": "5d3dd15e-d01a-4b9b-b949-3fa8989e99c2", "comment": "Malware payload", "value": "ebc74272ef3de3852800b06f1afa5018", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292055, "uuid": "f8df29f8-b637-4f1c-af9a-a749a48592bc", "comment": "Malware payload", "value": "0e54735fffc2b8983116fd0e3161db2580a6ce01c1386a8b482320d9143b6c8f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292055, "uuid": "3655f292-21e5-4e15-ad21-e9b84a953bb0", "comment": "Malware payload", "value": "fb175f80a0707b8a3c0ea591f2c307e12eacd5e0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292055, "uuid": "9bba709a-a59d-4e33-83fd-aa2ff52794e0", "comment": "Malware payload", "value": "388888bb57e6ae9f558e0a5eb81c40c5f662aefae2cbfcd0ef8f2aa029d6e8710d9d33e72b5c20c19c51e0e622451bd5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292055, "uuid": "1ae097ee-f4bb-4391-a35e-7b3fc1294e93", "value": "T18DD64A30C250EB12F2B391B55529974978186B640B2C55E709E4FCE83BF81D2EABDD3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292055, "uuid": "76e8e974-eb18-4e90-a830-4196893dc6b5", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292055, "uuid": "85d08e6b-0062-4c2d-aa0a-49e9cae28e35", "value": "49152:atVplF5UZz/h5kVXQ6iIBiRvYhPD6CS6XOg7ttXp22Zp22X222Hp2222ppBUuVk4:atPb5qvkVX1iIwAhL6CSjavs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292055, "uuid": "e4ced337-ad2e-4141-b5ac-3f36750fc373", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292055, "uuid": "e28ad272-b446-42ab-bd29-071894d275f9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292055, "uuid": "657b3d09-3cb3-4e36-b5b1-763d46ae5e53", "value": "SecuriteInfo.com.Win32.BankerX-gen.3902.11889", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c232f73d-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249661, "uuid": "430da2da-cfff-4f0e-9cb5-cc35d3edbae8", "comment": "Malware payload (Mirai)", "value": "cb05bdc4b202db9c4b1c335bd16ffc2d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249661, "uuid": "34730d35-fe04-48db-b194-8d6328580f28", "comment": "Malware payload (Mirai)", "value": "0f26d64aca2d3685f9269efaa2408393441efaa32b0dab4a9f957681de4a94b7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249661, "uuid": "35963120-aea2-449e-b7a1-24463b2f87c0", "comment": "Malware payload (Mirai)", "value": "a0b729acb491270b33451d0eedbd629501ed7af9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249661, "uuid": "dde9cd65-4320-45ea-a4b0-aab531c70739", "comment": "Malware payload (Mirai)", "value": "73f4e4aa50c61ba8669d8a7a166b57dc390d7fd4fde543c5fe0662cc414a15874265230ed8b5d749ba14dc0c4943ed0d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249661, "uuid": "95209d91-1721-4eaf-bbd9-056f4e9c1980", "value": "T17E042A45EA404B13C0D627B5FADF42453333AB9497EB73069628ABF43F8679E4F22905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249661, "uuid": "80a21b4a-081c-4ec1-b229-e2ed7cb572f2", "value": "3072:6N/mswezlTERakAajYFyisk5ybXCUBpa4/hJjogM/RnyOGN:6N/LlT89AajYFybkAZBw4/XMgM/RnyOC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249661, "uuid": "62ca0888-4469-4f14-bacd-c3ce21f76b1f", "value": 179829, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249661, "uuid": "432d5807-930c-4207-a138-44d22373189a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249661, "uuid": "601cc054-9191-44f0-a1b5-826c360ae1a9", "value": "cb05bdc4b202db9c4b1c335bd16ffc2d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4102ced4-ce56-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708258034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258034, "uuid": "df5a4ea6-d6c6-47c7-b5f2-0faecca7db90", "comment": "Malware payload (Mirai)", "value": "d8295a4e807af0c8efe00245f2e43e29", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258034, "uuid": "b6f91349-36c7-4342-9719-c3a0bdebe1d4", "comment": "Malware payload (Mirai)", "value": "13afa3e2be5cdfb9cd9483d4e386eb76fbd6700aaa2abc95a2be7c362a7bb807", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258034, "uuid": "76433d2b-4128-4c6a-933a-3265cd5cf520", "comment": "Malware payload (Mirai)", "value": "3c9c6b8fb5b45f7f3fd5f517f1cf7d943c4f9f51", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258034, "uuid": "6ef5ec4e-2fd1-4b83-b5fe-dc631a6fcc62", "comment": "Malware payload (Mirai)", "value": "b26c10941b5fc68e75a140b29fa979aaccc38b232fc393a6e1d528d527040921c03e84711b5255b006b3d2bb5a3c21a6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258034, "uuid": "9d634792-da27-4a36-a655-cb897e8cba4f", "value": "T1E073D815FF651FB7D89BCC3309A81B0628CC665A22B93B367D34C928B54B15F19E3C68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258034, "uuid": "7e14026f-acfe-4892-b3e2-6416dd25fd4d", "value": "768:lqwATxpQ5e+y4ryr5YQlZDSPKDuee2etJeGq79/kWTrXilvo2KXZY10UPK:lCTxq55PIDSPKDf74JVi9/3J26a10M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708258034, "uuid": "23a539db-7006-4163-95e3-7bfb8d50bd52", "value": 73596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708258034, "uuid": "25305643-604f-4ec2-8f6a-ccb8855b58da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258034, "uuid": "5c6cfef7-e48a-418a-a40c-1ee0340cbf6c", "value": "d8295a4e807af0c8efe00245f2e43e29", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c9af665-ce08-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708224607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224607, "uuid": "179ff36a-3d21-48c1-92b0-00ece7d32ffa", "comment": "Malware payload (Mirai)", "value": "8461ed17ac08a60ff1396c6460480ec5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224607, "uuid": "057bdc13-8d7d-4281-a640-5839b745c139", "comment": "Malware payload (Mirai)", "value": "14ad2afa7e5baa362ff40d3855e33b0a7045eafb1de438bf6e4301e1e0db7694", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224607, "uuid": "0d84a535-a71c-4599-9da3-b6a4f0205254", "comment": "Malware payload (Mirai)", "value": "0dad913f90e00a80ea667ab763929b9fce763c1c", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224607, "uuid": "c99be717-16bd-485a-b8ca-a3ea3f6831ca", "comment": "Malware payload (Mirai)", "value": "8a886ea975225e95f1fc394bfb6f55ecca523921e2b680efab600d1dd84a90e9ffdfd62b6f82e6e7835a575680ed87a8", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708224607, "uuid": "1acdc854-30e5-416c-8a15-0245c9cfa86a", "value": "T144C2D136D68D5E74F2A04D30EA3EC9431B3F0B308AF9321D268A4965470972A66FD7D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708224607, "uuid": "f0534d8e-09fc-4c6f-9871-bc9825731911", "value": "768:8+p86kR7XocOx5bccH1M+PB1J67cF+z3Js3UozT:8+i6kR7ocOxlctax67JUzT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708224607, "uuid": "67247da0-bd04-4c4e-9943-2c4349320c49", "value": 28168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708224607, "uuid": "e7d773fe-5970-41fd-a1e4-eb45978a6ca7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708224607, "uuid": "2fac1ad6-3f19-48a9-8698-c569a73ec076", "value": "sora.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4a52ea8-ceb4-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708298574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298574, "uuid": "877bfcb1-e58d-4694-a571-56dc04457989", "comment": "Malware payload", "value": "8c071ef15f7a8cc32ec523046cfbb9ab", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298574, "uuid": "c5f0b0f8-c2e5-447b-ac0e-3646c28a8813", "comment": "Malware payload", "value": "16ed373a67ed1473782609e239f38dfa0091e26b7e0ab8955f48e297292045ba", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298574, "uuid": "95e4c3e6-aa45-434e-84d8-cb7cb8533712", "comment": "Malware payload", "value": "89b3691a5eed06c359ff50b82f29dcdb0477098f", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298574, "uuid": "01854281-16e9-46e3-8f88-33b960ec7bd3", "comment": "Malware payload", "value": "7b8a1189a9abcdb487c252532b643d860c416b67c1ae282b1fa5746c647272233c23a57a685a4f74785b0cea5855eb30", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298574, "uuid": "638f799e-16e4-4852-bf1f-2de46718ff92", "value": "T1FFF50B8F9C0019F6C6781B75649BC8CAD6B42DEAE17F230A0A58BECA51771D11FDE234", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298574, "uuid": "02f44cce-b8e8-4ab5-8e18-7650ca502562", "value": "bbe25b5700f96ec69a9aff00a2eee6cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298574, "uuid": "342382fb-4042-43d3-b6fe-aaab0b67cd48", "value": "24576:Wv7+lYPuTWvuQ2hulNdEabYHQLNWiqHyt6Gy1/6+b:vQQnneuwRegypJb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708298574, "uuid": "f7c33c5a-c4e6-474e-8885-b89d42eea3b9", "value": 3477899, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708298574, "uuid": "294e4d1b-b0a7-4699-bd80-afb887b97351", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298574, "uuid": "3193eb92-997f-4d6f-bcc0-d2a7040fef91", "value": "SecuriteInfo.com.BackDoor.Infector.133.5393.28023", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7aa85ae9-ce26-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708237515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708237515, "uuid": "15302149-82da-4617-8245-58a0f3a8adcf", "comment": "Malware payload", "value": "9df7953459350332647b678682d36bee", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708237515, "uuid": "eb80175e-f966-4922-9526-f802deef19ee", "comment": "Malware payload", "value": "18d46833467a3cf5a9bc13686dfe6c82a6041634e7861cdb62b607b9696d402e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708237515, "uuid": "83289675-e982-46ad-98e8-9d63d3c8c6d1", "comment": "Malware payload", "value": "d9629f4d8f65f6f8abdf9623823a52310d5da8fe", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708237515, "uuid": "eccbd7f2-57c6-4e86-b3bc-97419c01abb2", "comment": "Malware payload", "value": "4ef153dedfa8ec2ed871caccd99ecb9a0f25693e08f0138750767d537d15ab03b407d9a34fbb92efdf45d55a8d6b38d6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708237515, "uuid": "4b18e31c-95cf-4d4b-9159-96f88e797b5f", "value": "T17F25739306518F80D303D734A247225A811EF366DAE9E96E90FC3638FD949C355A6F2F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708237515, "uuid": "6199b99f-2c72-4c19-ba77-0c4ea100a19d", "value": "e7bb7584354a5a69b4dc5d9a4c5ba279", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708237515, "uuid": "49da470b-71bf-44c8-94de-5a9d8cbe4783", "value": "12288:VQ0YponROo6eUOj9CiPnh9FpvOOvMN9HNf1oPMPXW1:gponRN/96N9HNf13PXW1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708237515, "uuid": "bac7ed88-2c52-4cd5-a033-db1d503f7d69", "value": 993650, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708237515, "uuid": "530292d8-3807-45db-b0c3-8f4052edb277", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708237515, "uuid": "081cf59e-ebeb-4a0a-9461-41a9b8ac6290", "value": "EchidnaWarsDX.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3c68efd-ceb4-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708298573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298573, "uuid": "303d2b33-0b48-47d3-8793-c617c3748db6", "comment": "Malware payload", "value": "39f385789f2927135f1af1ffe8341d3d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298573, "uuid": "fdde355e-ef2a-405d-ba26-d0d7fc7a3d4a", "comment": "Malware payload", "value": "1d05d8e376399d9ef93e41e8b3d5970da6996f26d323ef74a6708361ef912db1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298573, "uuid": "f32fea6a-2929-4d36-af5f-c08c5df0f9c2", "comment": "Malware payload", "value": "19b709c477b8f2ef9da670dd721102e48112bcfd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298573, "uuid": "e0435917-a835-47e3-8b7b-c5723e6984a5", "comment": "Malware payload", "value": "58f21a6f3facda835b50d2959ed425561cddbca88b64bd03a385ac52f689cc16c90c7ef4bad822d1af55f05e94c986b3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298573, "uuid": "8e7989f0-32e0-4959-81a2-afa46b3d0005", "value": "T178E7339CF581603BE890EAB1E596901E5CD447C17F40884A2B7872EFEF1660F1D53EAE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298573, "uuid": "1935c728-938c-472b-870e-ea0b3928e679", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298573, "uuid": "a0484e8f-e8a4-45fd-ab28-aef4401e4dd1", "value": "1572864:LEDX46sZDNHghraWLrp4Ka9q4xVqZG6agYk:sXJsZNHePWKaEosQ6agYk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708298573, "uuid": "bce6fb03-0326-4f35-9cc2-e49b3e2004b6", "value": 63856352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708298573, "uuid": "88d79519-9912-4d9a-b313-da3fe9968acd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298573, "uuid": "ac1b179a-0f91-47c2-ae24-b6d5032f9bb9", "value": "SecuriteInfo.com.Trojan-PSW.Win32.Alien.fn.31085.19027", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed105d15-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708278080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278080, "uuid": "4531a299-e0c1-4a34-b110-9660af3e0e30", "comment": "Malware payload (Mirai)", "value": "18ee1c539fac67a0f74a12aafdc43c85", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278080, "uuid": "45031bf5-7b8b-44ad-a298-85fc4a59edfc", "comment": "Malware payload (Mirai)", "value": "1d57fce0898e78d91038023a42e71ca5df5ea3ef112081986bed6a1a5bf67569", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278080, "uuid": "69bbc20d-47b4-4577-ab0b-e19817b18897", "comment": "Malware payload (Mirai)", "value": "be9ab0b0aebdc08eba086a38c493d392fac4cc6b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278080, "uuid": "cfe7f386-d0a9-48e0-99c2-2af944fd49e0", "comment": "Malware payload (Mirai)", "value": "143888d9580127ec7103d3b320f6b0a929826ae270e917bbc731443459b4ca8acafba3e6a4b8f810b0864e25dbe5d1bd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278080, "uuid": "536d2608-52bf-4f56-913e-855490fdc2ad", "value": "T16E439E65C9A89D64C21845B4B614C53DD323E404AAE33EF6CA46CA5AC06FFECF0997F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278080, "uuid": "13b33e70-3ba6-4308-8a1b-fa2165842ce7", "value": "1536:J/At4MX2Ma+Kb7gv7n2ppfs3Gd4o+kwfzPC3m2:JYtN7d0I7n2Tf+A4o+kwfzPA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278080, "uuid": "7e221ef9-090c-4c0a-b8ae-e405e669a419", "value": 59644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278080, "uuid": "bec4851d-48e4-4542-b99b-da3219c5292a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278080, "uuid": "68897656-25cd-4a1b-9e8e-f6b70c16d0cd", "value": "18ee1c539fac67a0f74a12aafdc43c85", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fe2d127-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292043, "uuid": "641811fb-f6e2-44c1-abc0-b9da2f36861b", "comment": "Malware payload", "value": "f7201e7c0d7778a30466aaab08536f72", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292043, "uuid": "247498ee-e5ba-48ff-af28-e775dd97a088", "comment": "Malware payload", "value": "1ec11c75696e721369c6fc6cffccc12a9f35b130c7ae083034b0266b91b1bea1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292043, "uuid": "baa6547a-70bc-4c7a-974e-f047e0d0ad1e", "comment": "Malware payload", "value": "606366d865f3a2b38be6ce47f1da74f100197f4d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292043, "uuid": "0bf4bdee-b21c-4803-b597-ab5e06eb6d0d", "comment": "Malware payload", "value": "28bb6129b4808ac5aa992392ec589d9eaa7e8218ff92267680b4a24b7bd9c4717dc9ac496a42ad9ce7beb684ec5f366c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292043, "uuid": "8abfff3b-2a4c-40b7-a99c-3dc8f668b019", "value": "T185D64A30C250EB12F2B391B55529974978186B640B2C55E709E4FCE83BF81D2EABDD3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292043, "uuid": "1b2e135e-cfe2-4312-a6cf-1c75b3b9ec76", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292043, "uuid": "d3dbc73d-5bb4-413f-8877-6218e8ddc819", "value": "49152:atVplF5UZz/h5kVXQ6iIBiRvYhPD6CS63Og7ttXp22Zp22X222Hp2222ppBUuVkm:atPb5qvkVX1iIwAhL6CSgav7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292043, "uuid": "00a1f6e2-7a6a-41dd-ab96-9229263708db", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292043, "uuid": "27189914-667e-4979-b92c-287394b4e32b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292043, "uuid": "4d63e64f-7bf2-4b19-9407-b5f62789847a", "value": "SecuriteInfo.com.Win32.BankerX-gen.9450.15831", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc9b14a1-ce39-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Nymaim)", "timestamp": 1708245813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245813, "uuid": "408b3998-62eb-4ae1-a4d0-5a150cbf5858", "comment": "Malware payload (Nymaim)", "value": "9d8d3b32f2db716b6c9be5bba062a617", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NyMaim", "colour": "#0E3AD4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245813, "uuid": "90b8790d-e923-4b33-b11a-6d81abbf584c", "comment": "Malware payload (Nymaim)", "value": "1f94ab5b3a1c4670becc9075ef840a43827b37cdcd69f93d0ed48bf2adf4bdba", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NyMaim", "colour": "#0E3AD4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245813, "uuid": "ff1e32ae-4b0b-4d28-8cdd-5aaf904860ca", "comment": "Malware payload (Nymaim)", "value": "d50a51aa90dd43241d9812d965821c3589d5bcd4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NyMaim", "colour": "#0E3AD4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245813, "uuid": "1acb436b-38f6-46f3-9b6e-72cd63a15d53", "comment": "Malware payload (Nymaim)", "value": "dfe1e22acafee655e9b7968623c82b91ed9de6c77486c53d86cc3c2aaf2a4e6f60189d1146d9bd080ac86286836b0c69", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NyMaim", "colour": "#0E3AD4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245813, "uuid": "894ffce5-e766-44de-8189-0c2797869f04", "value": "T14854C021B5A0D836C6E705358834D6E56A7EBC325934928BBBA43F7F3E312D16B31316", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245813, "uuid": "cbaf4838-1dd2-48c0-adfb-f19371b370b6", "value": "34c4161f659e591de8a4c6e215c7a951", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245813, "uuid": "fd2cff72-36df-4da5-bfc2-3299f43a0c78", "value": "3072:CgeyDhywpNSP3DKENiX5abkqdM6cZvrZFQmcP7hCV7WpkPz8sWwukfjo5FJ+4BDR:9XQTK4RgGU1dSoVykdDyJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708245813, "uuid": "60098ae0-f572-4e5b-ab52-027cfc0706be", "value": 300544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708245813, "uuid": "d8735324-14a6-426d-88c8-8e6c4f3eeb24", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245813, "uuid": "c6bbb7ac-60c3-48cb-8706-b501889488d1", "value": "9d8d3b32f2db716b6c9be5bba062a617.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcc23b36-ce26-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708237733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708237733, "uuid": "01c95695-45e0-499a-ab47-78318abd45a9", "comment": "Malware payload", "value": "9a02a2f6c261bfbe00752d6169e2306a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708237733, "uuid": "dea746fb-c3dd-40bb-bfbb-09ff83f36214", "comment": "Malware payload", "value": "201d8b53cf0a1935adea407933c84626013d248ce1a80351f9d070240e1f5e45", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708237733, "uuid": "9d271ff3-9598-4b14-8c14-3ffc6d08cfda", "comment": "Malware payload", "value": "1d067004af08a958e28c731727460ff622448994", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708237733, "uuid": "ab68ca94-be0f-487a-b89a-bf3962e7aec6", "comment": "Malware payload", "value": "1d4c24bae4eadc265198cf23a36041c25e9aebaa1075da5adcecb87d65824a471e57b9f372b8bfbd20abbd218200a2bb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708237733, "uuid": "3855d440-bfa3-42db-b114-d8a953e38372", "value": "T15A1512CDAC0440A7E654363494D2FFBD426EEC91BA4260CD7CD9BF9BB63292D182395C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708237733, "uuid": "5c28db72-12c2-43d9-b3e2-1953d545b86b", "value": "2388fee6ad8ce4f4a35dbaf64e2da01a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708237733, "uuid": "fe94d1e3-6866-48d5-b7bd-16b5ea5b5a6a", "value": "12288:iR8AM+QbbPXaogU58eLF7YNbOO8eLn5aZ6TZO7Ke0xBshl4yUVm2STx:/AM+QbaU5+O3eEZ6TGKtxwl4w2S1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708237733, "uuid": "a4e88d02-4efd-469d-9fcb-917886ff1c31", "value": 921936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708237733, "uuid": "1cbd1391-5fa4-4845-b166-3537abddbaa4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708237733, "uuid": "5f951a46-0343-4440-ac69-3a013258ed69", "value": "SecuriteInfo.com.Win32.TrojanX-gen.12596.20471", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de06891b-ce83-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708277625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277625, "uuid": "077007f4-a35d-48c8-b871-89821aa46656", "comment": "Malware payload", "value": "817a19022c9f987a8d7a9e3237289199", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277625, "uuid": "9fac75a2-c75a-4cc6-b326-27df3d6a510d", "comment": "Malware payload", "value": "21f127461a3d60021c68246fba71a704a95c5fcfa61b48723e9390857b4ca2e9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277625, "uuid": "f85108ed-46fd-44fa-b294-416fa745af24", "comment": "Malware payload", "value": "64d25ccfff05c243beb27e6444eb277647c87de8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277625, "uuid": "34765e52-8c19-470e-9129-5edc27fd5f47", "comment": "Malware payload", "value": "7507ab6119f0a401a0935eb7087dddf4897b1d56f126825fc433fbc504ba1d442849bfd9f49a0168e185a3143b2a0229", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277625, "uuid": "3b02ff3b-aec0-49e4-b995-e5fb25a00609", "value": "T1B3949EF8AE620368DA14E836ED773156439B05A70DD56E332738512B3A7FE42271FE09", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277625, "uuid": "7f90c5bd-ce40-495f-b7b8-e8080ad4f628", "value": "b77b99c3883f50fc5eeab54139139034", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277625, "uuid": "baac91b7-d279-46c6-b111-439540c5afc0", "value": "6144:l+qE2NY9Bl5wOH4XkbNaxEGrGKwvQgA0uurrsLcD3Wx7UX5gLZwQ+EEEybUwl:lPE2NYPl+0bNaxE7JwPLcKxezQ+9Ey", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708277625, "uuid": "aeac92d7-d845-47fa-8a38-7fe97cae64bd", "value": 436736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708277625, "uuid": "58a97016-1e9f-4053-a4f1-7ad0e557d29e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277625, "uuid": "d50b0645-bdfb-458c-8b1b-76023e48e9a2", "value": "Minty.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9888377d-ce79-11ee-b7ea-42010a9c0006", "comment": "Malware payload (QuasarRAT)", "timestamp": 1708273214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273214, "uuid": "d6bf01d7-3f2c-475b-b594-88af911d0223", "comment": "Malware payload (QuasarRAT)", "value": "2f58e69fb28dd0f887fafe3b60d41349", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273214, "uuid": "a617e9d2-ecfe-4f39-9dcb-4de9f2ae9853", "comment": "Malware payload (QuasarRAT)", "value": "241408829ccfac14929e67c9f36776b60fa88ad57a181f109e977b203044bfb3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273214, "uuid": "3b541947-e0f7-4668-8b48-7a9efcddbd5f", "comment": "Malware payload (QuasarRAT)", "value": "c547279f780fe303a6f295c4c523de74960d3edc", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273214, "uuid": "ca8ec2bb-70df-4778-90a2-9431eda81f2c", "comment": "Malware payload (QuasarRAT)", "value": "5de136636b5734c5c9b71e6f370a9fc31e79f1350cba799c28b0c4f42c4aacc2ae1a35b6b5acbf91ba38edcbb1207284", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273214, "uuid": "63ca103d-ed1f-4354-9bb6-dfb70c63eb85", "value": "T1DEA52A2213A4E7B7C19E6E73B0214A1563B5E3493B91F7DBBB04DCA52C47B419C24EB2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273214, "uuid": "d6ff1bfe-44cd-4f4a-af49-f5abfd7824b9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273214, "uuid": "17583e6d-4859-4c1e-ac8b-d50097e6a642", "value": "24576:M3Nyr/8YJyayq7+elS99fH+8xitGkkdwmIoe2LyCWh+dOV6I9bG/9/7Bjk38WuBb:Mnaoe2LyCWh+A6IM/BCSA/Bkj0E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708273214, "uuid": "74536a7f-6032-4964-97e1-730b39fe1ece", "value": 2136576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708273214, "uuid": "345abfa9-2df0-4d07-9379-07886b4394cd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273214, "uuid": "1a0947f1-0d7c-47be-be7c-ae3742cfe5e1", "value": "2f58e69fb28dd0f887fafe3b60d41349.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d23e8d9a-ce39-11ee-b7ea-42010a9c0006", "comment": "Malware payload (LummaStealer)", "timestamp": 1708245823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245823, "uuid": "5360ccfe-a5a2-45b0-bb19-843fafdb00ff", "comment": "Malware payload (LummaStealer)", "value": "37380563090511ea781344f16e7446a0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245823, "uuid": "91cbfb84-a07a-4803-961d-3cf321d8deeb", "comment": "Malware payload (LummaStealer)", "value": "25937b44434a3cf1222e3fb557ab86a5310b0c7d397b53deb3fb4099ca3164eb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245823, "uuid": "8028319e-45e8-477b-b548-7a34799cfaf1", "comment": "Malware payload (LummaStealer)", "value": "1e7b84401d7e1531f2ba231c43f5574638019bc2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245823, "uuid": "03f58984-6536-4a59-9ce3-53e1902deb9a", "comment": "Malware payload (LummaStealer)", "value": "e616b5d5f13c74fc52e777e01eb14b1d1446b9f93bca0aadd9c70b274ec926097aa1f0f6cf93e5ed9ecd023fbed108ae", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245823, "uuid": "b137442e-0d2e-4591-9b60-ef1b4a2b8afd", "value": "T14BC512D9EF5218ACF8D866F44B82BE4CF2FB1E705851A917A4AC7AC37D729805031B47", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245823, "uuid": "5fb48580-ad8e-487c-a02f-1bc04c62354f", "value": "9caafbdbc2e4058a72f16da23abb939f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245823, "uuid": "c50eff47-0354-47b5-9b39-5bb7c66c204e", "value": "49152:KX1LhS/sbQmhY/q9zIJlo8cyb1ahs6FPX1O1HQbioI1o48/6JYxCsMDC3zh:K/S/0Qmh5zkcy8hBXOIw8yQQ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708245823, "uuid": "128924c3-f9e5-44a5-8cc6-d26759e8f534", "value": 2732656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708245823, "uuid": "6411504b-eaea-43c0-a40d-2980c9cf20c0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245823, "uuid": "a33a9472-4360-4c28-9524-e7ed927a0f32", "value": "37380563090511ea781344f16e7446a0.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b618b72b-ce69-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708266391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266391, "uuid": "8ced9bd9-a51e-45b2-a869-a07a1e088a83", "comment": "Malware payload", "value": "9f056c468808e948de3bd2b6b83737a4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266391, "uuid": "a0485c65-22f5-41ac-bfa3-9549c61cb15a", "comment": "Malware payload", "value": "2688fbba0d62187151772e48affbda149823f3ca170b0e265d208a9272d509ad", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266391, "uuid": "ee830c8d-254e-43f6-89f7-6feafe759b20", "comment": "Malware payload", "value": "728a2e9e199db95dd75308f4c715997322f91edd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266391, "uuid": "7a351a32-7f7e-4011-a612-47ab18c3e388", "comment": "Malware payload", "value": "9f75b4c37b650970b80575013e618b17d1f1af4db3c49d220e1d274c6d172fe19fc399a0d28949622b8c1e553587833d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266391, "uuid": "1e78e9a5-0977-4b31-a1aa-0008cb859199", "value": "T1A934121A4610CC34D15E863380B85F652AAEDA1A793F8F472798E61FFF8554B2F413AC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266391, "uuid": "a268941e-55e1-4243-81d3-a5da02d474b1", "value": "96935533f4570723cc99f4474d63f6fd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266391, "uuid": "8c3476cc-61a5-4f72-9ccc-ae43dc27f31f", "value": "6144:BjIKBmQdSSgBPAzpqjWvmlxjo/gZnrED2cG:hBmQdniP7+GGrScG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708266391, "uuid": "dd184320-8dee-4ea1-a9e5-dee6a4ea4c11", "value": 247483, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708266391, "uuid": "4a357c43-ba69-4b84-a3c7-1f5754a77dc1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266391, "uuid": "c93d68c8-1529-4c9a-830a-eee7bc0df338", "value": "SecuriteInfo.com.W32.S-aaaf75bd.Eldorado.5714.20408", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d97e6d87-ceac-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708295227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295227, "uuid": "22e69d7a-acaa-4bad-be41-948b96afda07", "comment": "Malware payload (Mirai)", "value": "886a52f13097658c7dce5f4859c57d8c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295227, "uuid": "2ea93179-81c6-4631-a563-77f2834c1cfd", "comment": "Malware payload (Mirai)", "value": "2845d68ba1a32ada370171e91cdaa368e5b5b7d1e3c3c301b6c6a7e0309278f0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295227, "uuid": "24e739b0-f026-43fb-9c8d-c8cac2fd5c53", "comment": "Malware payload (Mirai)", "value": "d112b0fadd03b86ce978e1d63a53724ce32a0988", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295227, "uuid": "4dc0edba-cf17-4074-98c4-872d317c38ac", "comment": "Malware payload (Mirai)", "value": "f9b4cdbc2602b7eb933f34cfd1709de0a2b310f7f953f37ce69eccc647e93b8f5a292af60783dd342e44fffcccf73ade", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295227, "uuid": "a9394988-bee9-4902-aa8c-b530bc916a94", "value": "T13F73F942BD819F13C5C222F6F7EF01893B156B68D6EB3242E925BF9033864DB1D67261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295227, "uuid": "ca0b3c8d-6048-461a-a389-d8f1ee6a514d", "value": "1536:CltZg4vUYyeAIC9vWhfQVhXxA6CrtobtDtz/Tvr0/:CTZg4vUYg+CpCrWZhvr0/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708295227, "uuid": "89522068-887b-4de4-af0a-595bc10f9b5d", "value": 78692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708295227, "uuid": "ee3acca9-9424-4d55-aea4-9550c49bc019", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295227, "uuid": "dbf68307-80fc-4ca3-814f-598d834071ae", "value": "886a52f13097658c7dce5f4859c57d8c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "120afb95-ce0e-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708227032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708227032, "uuid": "0a0e17c7-261f-45ce-a1ad-3ab41ba5dff0", "comment": "Malware payload", "value": "761ca2fe9e0dbe24c195e04852f6691d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708227032, "uuid": "6a7f0510-60ed-427c-b2f8-81613c1a2a43", "comment": "Malware payload", "value": "2ad9c54a07ab4e14e1d80d5441e4671f50e72f17a6c147d3d10d9ecec5d12680", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708227032, "uuid": "588c9e43-d9c7-47d9-8153-5534bfa60b60", "comment": "Malware payload", "value": "9a5078cc48a46ebe122ba7c3c72d40d79273d79e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708227032, "uuid": "0039e98a-13e6-40f7-9c3c-6af376904122", "comment": "Malware payload", "value": "e02b45a323610dce7a8acf8b7b9d532b62126f51dc51b47a109b9d722d6f767254c700c18eb3fb56c2fbc9c262caa0eb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708227032, "uuid": "1c7b1458-a468-4664-9660-d7874543d48f", "value": "T13ED4AFF5EA861CAEE866483480DAB4E054F9747745E0CF8FB8337D710E2371AB71A529", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708227032, "uuid": "033424bd-1eca-4fb4-a073-7d076068c417", "value": "b77b99c3883f50fc5eeab54139139034", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708227032, "uuid": "d146bbc4-12f5-4dd1-92c3-9cad4f6d4911", "value": "12288:NJcePyJvRgnepuDrM1LFHQAMVlPtyFcG5t7AIIm3FSwzkUBxn:NlyJvRgeurcVmsFcGbDVVLX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708227032, "uuid": "db14b992-8132-405b-8d88-e91ec5c1f924", "value": 652800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708227032, "uuid": "fd69a193-9949-46b0-aa10-4cfe1b132b3b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708227032, "uuid": "912e266f-789b-4e29-9206-60af55a66c6d", "value": "Viper.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9aa173e7-ce3b-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708246588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246588, "uuid": "0f231292-6ec5-42e0-9796-da936bf63c53", "comment": "Malware payload (Mirai)", "value": "6d540420b13a11441c03459b2e207b7c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246588, "uuid": "c00f7a2e-74f6-4269-8f7a-c944678fbddc", "comment": "Malware payload (Mirai)", "value": "2af28e0ef1b8474be950e6e1b32f9b4cbb87ce3002bd3891c4aef72de5d24b98", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246588, "uuid": "ccece54a-49de-438a-8fcc-35108bf8eeb4", "comment": "Malware payload (Mirai)", "value": "c94248e2082f3df2bf6d97bebf4564d7f7e709ea", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246588, "uuid": "0d452ca3-0159-4ce9-92a0-1eb9047f00a7", "comment": "Malware payload (Mirai)", "value": "2e7911a31e79c533c22beccdbaa25ed1e9abb0afa65d61efa18fc6e123f73b8d94ec43fdf8069d355011dd865806a9ab", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246588, "uuid": "b78fe6c8-c4e0-49c6-a590-a0d5da24c4d7", "value": "T1DC635C53B2280D17D0A30A70293F4BE18BBEDFD121F0B686695FAB568536D331586F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246588, "uuid": "bb64b976-a2e9-44f7-b58a-6329b6ad513c", "value": "1536:HtDk+zX0QboUK99VB1nw1aXb/E1WbIRVcxJa10L:qkE6pKPVB1nsaX41WbIRVo4Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708246588, "uuid": "0cc6e570-0899-4b9e-938f-2235c5394af0", "value": 67956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708246588, "uuid": "ba3710d0-ff02-412f-95ea-15a85fac2862", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246588, "uuid": "40e430a7-7bfe-4f62-9f4a-bcd7596025a8", "value": "6d540420b13a11441c03459b2e207b7c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c81088e1-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249671, "uuid": "dfc4bd77-de33-4af7-8c85-1294a829d954", "comment": "Malware payload (Mirai)", "value": "3286ada5c1e7325b55891acb13746319", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249671, "uuid": "b817a457-ce5d-4b4c-8f7d-cabb05065f57", "comment": "Malware payload (Mirai)", "value": "2c9548ca6298f438d4ab3464c7c1fdb93db4a5e1a005227d7bdaf8616f91c11f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249671, "uuid": "1dcb08e2-4b28-469d-abf8-e8f3643f8cd3", "comment": "Malware payload (Mirai)", "value": "879d616e832072c420fec5b68383ed15d8a353f7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249671, "uuid": "1657e0b5-ab76-4aa3-804a-58b8d032059e", "comment": "Malware payload (Mirai)", "value": "92610f7a4741e119816a27fa003f41bcf5b67a9605adf05a6bd9ab07486d3da9f3c3e24ab076dad9c3dd9b1c99c6b5e3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249671, "uuid": "f9be597c-7436-4b13-a08e-799cde5d6d86", "value": "T167D30945FC405B23C6D612B7FB5E428D3B2A17E8D3EE72039D256F60378A95B0D36A42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249671, "uuid": "98c84530-4061-4b45-b858-c2be6ba22736", "value": "1536:1HQeHIjFlGz/r5fQpj/lFcAPWZf4VTyqsTgDpMMvnPu2/gUdWl5IJwyw2FR4Yoas:1HQeFfQd9FcT4YZMDpMMFoUwpJibI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249671, "uuid": "a741d08d-576c-4638-8951-088b898db1fa", "value": 133888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249671, "uuid": "abb651ac-d479-4a4c-a525-80b5ea8e6541", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249671, "uuid": "549c8a73-fa62-4b27-ab2f-4f4d7b75f833", "value": "3286ada5c1e7325b55891acb13746319", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d68aedcd-ceac-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708295222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295222, "uuid": "3019a7ff-56f3-440e-b753-dbebf24b9c40", "comment": "Malware payload", "value": "0f9acb4e76f9b215c6833c4f3195deb4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295222, "uuid": "fcba8a2c-ee2e-4004-b629-a2110b0c1c08", "comment": "Malware payload", "value": "2cd13a141ac94f275d78fe1287d8bd1694a29bb083b04250f47fa3d367097d47", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295222, "uuid": "7d87e02f-f45c-44bd-b790-11200a6ae0b2", "comment": "Malware payload", "value": "377945702beda878a3c7d67886011466aa0e4e20", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295222, "uuid": "dd4e81c0-c2c6-4f42-bfa5-d6f7ab010d56", "comment": "Malware payload", "value": "15681977cf581e92088a6cfee7dd4b53005be8d90a0d4b593e365c580f3b7da498688d64d7ed0d76fdda3353223c9711", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295222, "uuid": "e35467ea-803b-4874-af6e-b4a4c9d7309e", "value": "T11F93BA1E6E21CFBEF659837047F74E31969877972AE1C581E16CE6401F202CE641FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295222, "uuid": "5dd79a38-5d1a-4b04-b4fd-7140029a6543", "value": "1536:SHsP7vYXaktRaRHmhCohCc1hCnbUf/217aBbbC1we2U4G:NvYXZtRQW/217ibeJ4G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708295222, "uuid": "7d96fd74-8347-42f3-91c3-105e7f054eff", "value": 97268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708295222, "uuid": "d5eb798e-7f18-4c05-a86f-0c471b84445c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295222, "uuid": "e7fb8eea-5a00-4126-a8e6-95a3cdb65118", "value": "0f9acb4e76f9b215c6833c4f3195deb4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd9f2ec9-ce9f-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708289704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708289704, "uuid": "acab3276-9521-4473-8817-0bbe68ec2ff7", "comment": "Malware payload", "value": "460095d4e50c129ea224d71dae1efc6c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708289704, "uuid": "fb0beb1e-78f8-49ce-b21f-ac3ab46c40d6", "comment": "Malware payload", "value": "2ecb8c448812f7054381516b40a92bcf1b6d1b675b39d4fa1ac6fb0369c71fc7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708289704, "uuid": "901a394d-095f-4f12-b1ab-482c9ace051b", "comment": "Malware payload", "value": "20e080dbf22320b3a939c3ca02b0e27e19756c04", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708289704, "uuid": "ff23b44a-a76a-4cf3-b32f-98107b09c147", "comment": "Malware payload", "value": "20569b4869df2af4fa81af1ab21644be973f4398eacef2ff4c0f0a56d7357f38ab1ad95c7a4ab49f014b0f1dacbbf78d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708289704, "uuid": "7b40eb8a-b931-43e8-98e4-8015f7c0c181", "value": "T130E56B143BF85E27E1BBE277E5B0041267F0FC1AB363EB0B6581677A1C53B5098426A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708289704, "uuid": "af825eb0-932d-4ace-a38b-110c4e85ef69", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708289704, "uuid": "2a6294e1-ddd7-4592-bb53-4686453aea57", "value": "49152:6vkt62XlaSFNWPjljiFa2RoUYIR4RJ6nbR3LoGdMTHHB72eh2NT:6v462XlaSFNWPjljiFXRoUYIR4RJ65", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708289704, "uuid": "4aebc85d-bf71-4ca6-a38c-69a0d0798831", "value": 3265536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708289704, "uuid": "bdbd0423-401d-4481-9e91-2c3fdf7dd7f1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708289704, "uuid": "d07e8695-ea79-4e5b-9949-eeac2f6a649e", "value": "Client.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c23568b7-cea4-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708291752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708291752, "uuid": "9fc5806a-4f3e-4a2c-922f-887bfdcd1dc8", "comment": "Malware payload", "value": "bb1eac137422a07a2f3ad14ab820631d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708291752, "uuid": "c18d55cf-1d9c-4e2b-9cde-e390e36753e9", "comment": "Malware payload", "value": "303bd3f1d49dd849729452303c02b81ccbf698cc0f85c91a66377632cb47db60", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708291752, "uuid": "4cf057cc-5280-4863-83d8-f170fb9220db", "comment": "Malware payload", "value": "55a5238efdd6a70d160ef50789172442eb89d95e", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708291752, "uuid": "ee789bd9-c9a0-4a91-a4eb-2aa0d4c710d7", "comment": "Malware payload", "value": "bfc60283d8b116aad8818ada10d23eca4950af60d83a1c13bcb1fe2d7da1503a676bbe4a131c537141fc3bd2af43813d", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708291752, "uuid": "e67edfb5-934e-4c89-809f-a94447912ee3", "value": "T1E9A3FA46A9819F02D4D631FAFAAE414933536FB8E3FA7101DD206F5023CA9DB0E77612", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708291752, "uuid": "16efc098-f310-4df0-8042-7015d57c621c", "value": "1536:WOnBiN7KBuo19rMjTxpv9+as/LR7kED0mlv6i1o9FB1F+RY7XCMG:kNPNjL9+as/LR7kA5o9FLF+RcCMG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708291752, "uuid": "a72c9ede-2296-42ab-a463-abc936e0652e", "value": 99780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708291752, "uuid": "a548738b-0a59-410f-bcda-1906f6d7a1e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708291752, "uuid": "e0eff45e-7f3e-48de-afa2-be957bd09e7c", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71a3ffb5-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292046, "uuid": "2f29e22f-7296-453e-be88-65afad188afa", "comment": "Malware payload", "value": "f8ef37d8ee36734df28a0278b439c260", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292046, "uuid": "5510afcd-3acd-403a-aa30-056c187e52a3", "comment": "Malware payload", "value": "35edac733d7111fe7ef320a9727f9367ef1171b8260664ee522663f75a07a33d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292046, "uuid": "7a23f6d1-08b2-4519-b4a5-0a508b233f14", "comment": "Malware payload", "value": "0d943300504f6b7e703b2c436fbef8d6f28caba3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292046, "uuid": "685c6045-6cff-481b-8f5c-30a5869d6fba", "comment": "Malware payload", "value": "80144917d1d15ec13f1521e5f93ad5e9f4af59845d873202f924134e6cd97bdec0508a7c47ff72f4940efbb57719631d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292046, "uuid": "907a313b-2237-4e5b-9a22-88b89804a733", "value": "T17AD64A30C250DB16F2B395B44529974978582B241B3C15E719E4FCA93BF40E2ABBDE3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292046, "uuid": "a5e746de-a2c7-4ed9-8412-6e55f649ed46", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292046, "uuid": "8c8cf83c-4ac8-462b-ac6c-98fdfe6e2765", "value": "49152:6FK021v7V3FEPLQ8Z7El6y4Gh0KooN7gvOg7ttXp22Zp22X222Hp2222ppBUuVky:6F5avx3FruYrh5ooUL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292046, "uuid": "a2e0144e-2a61-4aff-9f19-633fa1ed6b03", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292046, "uuid": "6e6d601f-e828-40bf-b71c-4991afa00640", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292046, "uuid": "a9693e72-1b3e-4d47-8636-3a4a0e28909e", "value": "SecuriteInfo.com.Win32.BankerX-gen.13763.17092", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dca45ad8-ceb7-11ee-b7ea-42010a9c0006", "comment": "Malware payload (IRATA)", "timestamp": 1708299957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708299957, "uuid": "b2db20b1-ee10-4ad3-931a-aaacbe0df113", "comment": "Malware payload (IRATA)", "value": "7b3eea2dd00b9e331661156f63eadc8a", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708299957, "uuid": "87c4f467-9ba2-4072-ac33-1cfa97c7ac6b", "comment": "Malware payload (IRATA)", "value": "362dfea655d1fdad4b40f1d624e0b4a9c4e7e0aba7f334950beda2564a184313", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708299957, "uuid": "e7873fa7-c6d2-4c17-baba-78d839a49ced", "comment": "Malware payload (IRATA)", "value": "0b4478ac6ebb45701cc175a5c2fcdaaca5c05155", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708299957, "uuid": "f12120b1-f5a0-42a3-b142-56e965d8bd59", "comment": "Malware payload (IRATA)", "value": "b19ce39b943590ddbfeb3a835e451a108088f15a042f006cac16c31ced7ed24302b6d04422733e103a018b847da7e0b6", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708299957, "uuid": "a98cc5cc-d420-4fe4-8302-2d85f1192c23", "value": "T10026CFEAFBD4995BC4F39731C17696A6510B4C258B83EF836914363C68BB5D00E4EACC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708299957, "uuid": "d11d7144-b878-4f2a-a3c8-bf04d5ecaa99", "value": "98304:YA+u4Y1sNALlOUajv+oTwr5qrdwcVkU1n9y858la:YAk8OdDp59wa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708299957, "uuid": "dbd278bd-3101-4084-a326-cce3d69c2303", "value": 4476713, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708299957, "uuid": "9b98dcc5-0f25-4e45-ab66-318a29ab314b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708299957, "uuid": "b08f7c55-f2ec-4020-ac5e-2e456ace44c8", "value": "latest.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f38a63ba-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708278091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278091, "uuid": "adeb1cb1-b3bc-4205-b27d-3677eb32f02f", "comment": "Malware payload (Mirai)", "value": "f8f15cecf2ae7ec15a917fc3c61dcf52", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278091, "uuid": "0105686a-9154-4eea-b71e-6c908ce09dbf", "comment": "Malware payload (Mirai)", "value": "38459bc1225073655613b88f211d187f92fc6b8225fbdf8f5c01579839002b9b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278091, "uuid": "45ce9528-6461-4ad9-880b-837454b80466", "comment": "Malware payload (Mirai)", "value": "8631eb01f1f44a20e6eb07e9a26df0dd2783b9f1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278091, "uuid": "e6f37ca6-2609-4b1d-8a51-c800ab3b2771", "comment": "Malware payload (Mirai)", "value": "f81552f4268e6805dabf300e69d93a0cb57ce7d5e1961d09dc9af2c923a10c3f5ff9698a26caff5a2686ae7086338f08", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278091, "uuid": "0f7d91fc-cabf-46d6-99c6-7da2600e3699", "value": "T16F4319C4A4C3F8F6E801147C207AAFB2ADB7E17EB4759D9AD7D81523E901A02D60639D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278091, "uuid": "686f7740-a0bb-4144-a0d7-19fa8ea7b1f3", "value": "1536:yP/2+OX+hs4pIq/sxSWk/zvwt33U3zo7:O/2+++BWxSWk/TQ33mE7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278091, "uuid": "ac80d791-eb79-4d0e-9746-c099eebac775", "value": 58448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278091, "uuid": "7a32d762-feb2-4f43-85a2-0bedf3297837", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278091, "uuid": "a74cb74e-cff3-4d4d-9202-8f93c17cb045", "value": "f8f15cecf2ae7ec15a917fc3c61dcf52", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e07f8f39-ce7a-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708273764, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273764, "uuid": "17cda10b-a2fa-4a7e-87bd-9098739a677b", "comment": "Malware payload", "value": "ae1e6818a98936398609a64425618aa3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273764, "uuid": "1e5a5979-9c8f-465c-91bb-74d34bdc48e0", "comment": "Malware payload", "value": "3b5d37839fa69e8f1e9d55cae98fe9cf5a5f370cc8564d970a3a2f89ff605ac8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273764, "uuid": "a283eef1-109d-40c6-9380-4f2db033f2b1", "comment": "Malware payload", "value": "4befd94c6d320a9caa8a6917eef9b405191c2c37", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273764, "uuid": "6aa11157-5a9c-418f-ad33-9e63b2ba1605", "comment": "Malware payload", "value": "a5a6acfaf5222fb7d6c83a3aaecc73d406636ba93ab6882b1c87a0744f14133d104aa855f609c37ef1ed5f80b7037d69", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273764, "uuid": "0e0b0f31-4482-4cc5-96dd-917a03f578bb", "value": "T18A745B44EDBE84A0E474437988B9F6F99B306F2D3811CE7296D4ED7FE5213858D062CA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273764, "uuid": "423cc2d4-698b-4c89-8b77-1c617a733ace", "value": "e29216111be8758f004d4ae8b6c1fd97", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273764, "uuid": "6165a378-a756-4adf-a82b-ba92ac2e5eba", "value": "1536:GOpFCEH/VWBPhrGKUnlQ9gDBXg/FUqDsgmLbZG2splupKOk27wE09W8fcjpR:jFHQJqpnl1Du9UP9bMCpR0W8fcH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708273764, "uuid": "81ebbb9a-ca22-45d4-97d7-bf617109e24c", "value": 357627, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708273764, "uuid": "042f4611-5a76-421f-acdb-1d2965345280", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273764, "uuid": "9d36fffb-cf48-4406-8cd5-4a483ab2f23a", "value": "SecuriteInfo.com.Gen.Trojan.27473.16116", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cc9803f-ce56-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708258054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258054, "uuid": "5ceec83b-2d6b-4c41-9eb0-ecea890b6d83", "comment": "Malware payload (Mirai)", "value": "e0ee276ed419f30075165e53daf98472", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258054, "uuid": "87d57caa-e3f2-4859-9e7d-a64c48a2b94f", "comment": "Malware payload (Mirai)", "value": "3bbefd45f92c6d84b2a733a9a4b6516b53200f2065de8d9928fb35d66317daf4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258054, "uuid": "daf3f032-db1b-461b-816e-658b9451590d", "comment": "Malware payload (Mirai)", "value": "3c2cd93836d8891430f774b6ee050406964468f4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258054, "uuid": "b310fc55-6feb-4e0b-ae1e-efb46351a4f1", "comment": "Malware payload (Mirai)", "value": "683d43158bf051129b6c0f157c2480b985f65ccaa75f21da0edfc8776a1ecf0651e49fb5352489cc53ff9f726c2d07f7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258054, "uuid": "f3f36889-7781-49f0-93c7-cb1633377437", "value": "T1AF435B21BA352E17C0D2A4BA20F74B24B5B517DA26E4C61ABD720F8DFF211506513FF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258054, "uuid": "6841b68f-f90a-4fb1-83f2-e21c66724320", "value": "768:6MCvorOQHgTKrdjkoMTfR3u9y3kwR/7eL2w9vpEjmN4gpywO+EZ/Jh+lV0UsYA:pCvtQHGKrdj2TfR3B3kI7QbTYfiV0r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708258054, "uuid": "60ace61d-abe9-4535-b66b-206f9db3d76d", "value": 60500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708258054, "uuid": "61cf7db0-30d8-4549-81ba-a38d40e01ea0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258054, "uuid": "db21f272-5353-401c-a345-19bbff3ca8e0", "value": "e0ee276ed419f30075165e53daf98472", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "259357b4-ce3a-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708245962, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245962, "uuid": "56d0160d-deae-45d1-adf9-27d2d63d906f", "comment": "Malware payload", "value": "b2f8a20aaac608fd39a6d78c98e367a5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245962, "uuid": "ef753a24-80f3-48d1-99ea-6a888ec9cb20", "comment": "Malware payload", "value": "3d53f67facf13a389057ff01f964eb4147bc663c62d828b9358c962d2c4ccf30", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245962, "uuid": "7fa6c79b-03b1-4e19-badb-4a9224ffab3b", "comment": "Malware payload", "value": "1cb75f8b6399d4dbf032c6d9d4724e821ff6593c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245962, "uuid": "72f124ad-6896-421f-a347-4f3760285748", "comment": "Malware payload", "value": "1438fceaf9b6275417569376d63bd90d5fe3b86e15ce74fed7504dcd4ac11d24a726a2e104bff736d0b87c212a27d195", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245962, "uuid": "b2a5e96a-8a37-4a63-8373-1439bdfce82f", "value": "T1CD0633008BCCACD4C6530D34CE425160ABF68DC8DB9045AB4D277EAADBFB7B51726A91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245962, "uuid": "9bcdd922-510e-45ff-a359-dbc40247b2f4", "value": "98304:/W0Ughn1zD8gmJUikb59sFaZw3abaqt8+Uen/xIO:/WBCn5D8gmJUrvsFaZw3HsJIO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708245962, "uuid": "8fcf6383-06a6-4328-9b22-54f5c352b066", "value": 3850368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708245962, "uuid": "f5155215-7507-418e-b8c7-aca6a628c6bf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245962, "uuid": "c1c331c5-aa26-4045-b687-f16e685601fa", "value": "b2f8a20aaac608fd39a6d78c98e367a5.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d154ede1-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249687, "uuid": "97e97659-bdd1-414c-80f9-e4724c18f944", "comment": "Malware payload (Mirai)", "value": "0fd45e152f01904805aac9c59fb23769", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249687, "uuid": "591f6571-6ed1-477e-9556-4fbf32d09c17", "comment": "Malware payload (Mirai)", "value": "3f2c2028b62687895d5ee8b14a953181c1cd6b285edcbb2592e31cacb7e9554b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249687, "uuid": "022f21b9-b08b-431e-9437-daa7f5238786", "comment": "Malware payload (Mirai)", "value": "b9b21cccf4209f714e2388cab58f65649c47b57d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249687, "uuid": "a6f2b202-9cf5-430c-a7fd-8f9e01ee77e8", "comment": "Malware payload (Mirai)", "value": "9e54855ec6593a742defd55ebf112615a0f0c2578297eafc2d8cb1669a4f2ff47428e0d635a13904af6a04ac7a523973", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249687, "uuid": "fbef6585-51e3-4cdc-94a5-f4971d26f6cd", "value": "T1F8B34A77C8296F68C259D1B4B0B09F792F63A58182472FBE54A6C3B64083DCDF505BB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249687, "uuid": "4f11bdca-5c16-452c-a8cf-4ffd0cc936df", "value": "1536:2aVTHW/qIAmIqnwHFGEWCRsKxKlnL7lvyiHzYNWtEPxu8AD/z1:2qWL5nwlDWMzxOVvyOsWKPx4Db1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249687, "uuid": "0c40e147-aae2-42ab-9c70-c7356aa27b1e", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249687, "uuid": "70ff1fe7-cd76-4530-a36b-4469956f25b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249687, "uuid": "7234499c-d66d-419a-bc0a-1e0ada0e1dc7", "value": "0fd45e152f01904805aac9c59fb23769", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e5fd3f6-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292041, "uuid": "4e9d88e5-7567-4f0a-9641-faad006606be", "comment": "Malware payload", "value": "4ef0cd03158f002165cbee4312520d84", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292041, "uuid": "b90e6148-f933-4c64-8225-44dcdd2e8f4f", "comment": "Malware payload", "value": "4112945aa7f46f4ef93554955fcf8828d26e8cbed9b71fb77eca91c178940483", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292041, "uuid": "b6ef09eb-590e-4160-85e8-383941be588b", "comment": "Malware payload", "value": "51919471b505df3fcee7347f4c4b2ce03f896cf2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292041, "uuid": "af113194-609d-4eaf-8094-854c710f6199", "comment": "Malware payload", "value": "c342d87a4b7c0a242c62a53812b127a85a092b91b1e2a7c0b7616ff83cd92b823af98e48af7ecaad39659416f348e5c4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292041, "uuid": "549d8468-b0b3-4365-b25b-e72bd0eeda42", "value": "T174D64A30C250DB16F2B395B44529974978582B241B3C15E719E4FCA93BF40E2ABBDE3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292041, "uuid": "7981d1f4-9111-4cb5-80ef-06e3bad3fc30", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292041, "uuid": "d5f0d28d-8d8a-4b4f-ae9c-513b89fac35f", "value": "49152:6FK021v7V3FEPLQ8Z7El6y4Gh0KooN7gvOg7ttXp22Zp22X222Hp2222ppBUuVkF:6F5avx3FruYrh5oorL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292041, "uuid": "e4fce1d1-ae63-4ff8-a5d5-90002e416cd9", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292041, "uuid": "73c2612b-55c9-48d2-9868-bc5ae956b040", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292041, "uuid": "4eb98911-00ef-4661-b4e3-60ddb6542bda", "value": "SecuriteInfo.com.Win32.BankerX-gen.11375.12179", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c87bd905-ceac-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708295198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295198, "uuid": "0e8b9e32-f294-4a7f-ac54-097df552445a", "comment": "Malware payload (Mirai)", "value": "3f6e6d8d2abba0f8596772dfe6684017", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295198, "uuid": "730b1079-c54d-4fa7-8c06-cf88508d7bba", "comment": "Malware payload (Mirai)", "value": "420157ad6e2cddb258e91412340d3b881886a1c111db0fe20d2821add655be41", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295198, "uuid": "aed15847-a39c-4b8a-beb4-a55f26484cbd", "comment": "Malware payload (Mirai)", "value": "e33fa86090cae87c6fbf3970569b82e0a7747537", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295198, "uuid": "12537668-41f7-4f77-934e-e9b3bc1e0394", "comment": "Malware payload (Mirai)", "value": "377bac98382325e370fd2df6ecad33bbd428e11567688aae19fb7e4da3d6a0d0144590f474c18137385d9023ec92b69e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295198, "uuid": "0329b04f-98b2-4f12-bf00-28a2e633cd97", "value": "T113A3FA46A9819F02D4D631FAFAAE414933536FB8E3FA7101DD206F5023CA9DB0E77612", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295198, "uuid": "0ec94786-c870-4495-b445-2abb85666f08", "value": "1536:WOnBiN7KBuo19rMjTxpv9+as/LR7kED0mlv6i1o9FB1F+RY7XLMG:kNPNjL9+as/LR7kA5o9FLF+RcLMG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708295198, "uuid": "93d17075-930b-4c49-81c3-b7473343dccb", "value": 99780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708295198, "uuid": "d3ce90be-5bc0-4196-876f-b8d8f4b9ee94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295198, "uuid": "41157adb-f4ba-4dfa-b6b2-d63efa2898e6", "value": "3f6e6d8d2abba0f8596772dfe6684017", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb7e7c96-ce99-11ee-b7ea-42010a9c0006", "comment": "Malware payload (NanoCore)", "timestamp": 1708287043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287043, "uuid": "b5db6dd7-1196-48d3-9bfd-67fcec79c143", "comment": "Malware payload (NanoCore)", "value": "cad2e56e0f6f490b74884f3d0237b37f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287043, "uuid": "1641fa30-8e66-4d88-9fba-6d48b45e7829", "comment": "Malware payload (NanoCore)", "value": "42c3d510fa655fa4f20163b69172a6dff1e990e8630fa465c4cb01c47f50cefe", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287043, "uuid": "90553c6e-f423-4819-8469-5c92a6902c4e", "comment": "Malware payload (NanoCore)", "value": "dbdf46ab3af70b281439adc47a240e15915ab137", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287043, "uuid": "84da1f52-024e-4040-8806-4756b6dbbfdc", "comment": "Malware payload (NanoCore)", "value": "556fef049a1d562ccd0ad6c172eb597b05266f87121ea5209a3f92de46f49625bebf06ba455bd0c5d244d133600725ac", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287043, "uuid": "ac3e34fa-e2c4-4ab3-906f-6e0b6a845303", "value": "T18014CF1A77A84A2FE2DE85B9611211538378C2E3DDC3F3EE18D855B39B663E40A071D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287043, "uuid": "f43230af-da64-4a55-b41f-7c9cdb85a101", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287043, "uuid": "5b5d1f11-24cf-45be-a42e-6a34b78b6040", "value": "3072:MzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HII0svu1SEImfAF8V7m8CJvflRg:MLV6Bta6dtJmakIM59uvImfVqflRj0v3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708287043, "uuid": "6c4d05e6-2e8d-4e91-a2ed-f5735b58d1fb", "value": 207872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708287043, "uuid": "af01fcf1-009b-4892-9e95-7fb6e0b18be6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287043, "uuid": "bddf018e-c22c-4778-9cc7-1842863a68b4", "value": "test.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1138624-ce99-11ee-b7ea-42010a9c0006", "comment": "Malware payload (NanoCore)", "timestamp": 1708287025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287025, "uuid": "6793727b-5b45-473f-8f9f-65fe848c16c8", "comment": "Malware payload (NanoCore)", "value": "058443ca2ad90aa69f6e5ca6484ad95f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287025, "uuid": "b6efe70c-ee93-4d8c-914b-9aa9e1eba541", "comment": "Malware payload (NanoCore)", "value": "451c0c00543d2e11080b0f769b081c95a2a4badaa6604ea3bab382e46326c262", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287025, "uuid": "930b8d04-358a-4917-adaf-c76c1795eca5", "comment": "Malware payload (NanoCore)", "value": "98ff96f5e4c18a5de2c4ce7a008889f3a9c537ef", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287025, "uuid": "e84bea12-6e90-45e2-a659-3a4739fe35e7", "comment": "Malware payload (NanoCore)", "value": "0ba34049f5613dda0205b45d101ff7a1c86e556414ed1752acd38340093974d7c3d0ec7f422817cc84f9b746f0138cf2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287025, "uuid": "cf0487a7-b61e-4b98-9d63-eae9942ed8b4", "value": "T15D14C01677A94A2FE28F86B9711302529779C2E3E8C3F3EA28D451B74F167E10A071D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287025, "uuid": "02169610-424f-41ed-ab98-b4441fe488d2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287025, "uuid": "2a4ea085-49f1-4de5-99f4-ae53b9ceecd0", "value": "3072:gzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HI26xB/vHXxTVHgUxECr3UQ+7Zt:gLV6Bta6dtJmakIM5eP/vZxECjUQ+7r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708287025, "uuid": "83011d8d-a941-44a6-bd09-5f896e135a6e", "value": 207360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708287025, "uuid": "898ac583-41bf-4853-89db-a6dac71392f5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287025, "uuid": "05f5cfcc-d10e-43c6-9a25-60832b8347ac", "value": "fabriz.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e955872-ce40-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1708248608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708248608, "uuid": "8532b77a-c0e9-4ad3-b3b8-9d7200e5f66e", "comment": "Malware payload (RiseProStealer)", "value": "10c8e643bffdae7fdd1e3a6ffd53ed30", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708248608, "uuid": "0204993b-e559-4995-8873-1e9864d60e93", "comment": "Malware payload (RiseProStealer)", "value": "4790c68fec1880ca7a2ac0f6726dcefed6f06a87083830ad209b00ab6447eb77", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708248608, "uuid": "0ece7aa7-fe6e-4f49-9f09-53fd17591755", "comment": "Malware payload (RiseProStealer)", "value": "fbc49b993712372e4134f2331a239424a96f410b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708248608, "uuid": "ba80407b-3a47-41dd-8a69-e8581c1932e9", "comment": "Malware payload (RiseProStealer)", "value": "ab891608fd2489696286b33e9102b9e6517de7c8e85dc3d3d37aefb79cd6d4c0f15fe3ae1fc656a18ad2098b193c7d90", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708248608, "uuid": "1e23d440-739e-4d4b-85ec-69e52671ef84", "value": "T17315128C7C9044ABD658777408C3FAB9426FDC56AD94A0CD2CEDBB57BB7291A0C2352C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708248608, "uuid": "754643f0-dd11-4367-a59d-a7f839637fa6", "value": "2388fee6ad8ce4f4a35dbaf64e2da01a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708248608, "uuid": "286d0e0b-76b9-4333-a3ed-9144f6784c9e", "value": "24576:i0B9GTeyp+EkzfhhQSTu6FoZBDHzl7juWw8XyUvm:FHGaEkLhxWZL75NXRO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708248608, "uuid": "07b8385b-8185-4f13-9407-69450986a3f0", "value": 921856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708248608, "uuid": "07c2c3e3-1639-4d15-b702-51acb0114b3a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708248608, "uuid": "e1b1b6e0-fde7-433d-8502-407d6c1c0e65", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105649.30549.11143", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1317cb0c-ce58-11ee-b7ea-42010a9c0006", "comment": "Malware payload (IRATA)", "timestamp": 1708258816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258816, "uuid": "88611884-567a-427e-b65e-eb6166e7b499", "comment": "Malware payload (IRATA)", "value": "91656759344021d9e6340fd856bb728c", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258816, "uuid": "92ba57b2-ee54-43fa-9760-42e579dffbc2", "comment": "Malware payload (IRATA)", "value": "47d22f33aefee3a368b99e5a781cdc7afd4c6679fe366b3ce62eb8e52cbb4a50", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258816, "uuid": "5e24eeac-fd83-43c1-a1be-8c979f84fdb6", "comment": "Malware payload (IRATA)", "value": "338754b4b8ac7a8cf8f595952a137e6bc60c0153", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258816, "uuid": "8ce870e4-6aab-4c37-8530-b5daeca1be7e", "comment": "Malware payload (IRATA)", "value": "9cd36561d752c60d385f34cbe5ea02bf679f8a03494f4fe71bbfa336512d721419e7546a7bb2da717999d55da2e187df", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258816, "uuid": "c5729ea6-cea4-46f3-95e2-d61d9cef64f9", "value": "T10D951243F2A6E82BC9F2C3332075223666775E158743A78B2D1977B928F79DC4B961C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258816, "uuid": "3498ebee-f385-48d7-a078-9247dfd8230e", "value": "49152:5/US+MqJJoOZuFVcJbvbHtlGQYSJ1stgYAFVaGhAAOlOCJ/gGsOR:hN+BJoAuavbDbv1sg7V51Oc0Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708258816, "uuid": "637082d6-b480-4f9e-8ef0-ed81ba91f3c0", "value": 1983214, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708258816, "uuid": "3f95b849-c83f-4752-bd03-9940ae1f3e92", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258816, "uuid": "4a4237e9-6eba-4f22-bd29-ced191e4e90c", "value": "app.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d40195d5-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249691, "uuid": "77add5f0-a411-4362-b9f1-50181ba0e729", "comment": "Malware payload (Mirai)", "value": "ac53ba71faab9b6bd341f3df3ad7e43f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249691, "uuid": "1a2615d5-4959-499a-88cb-dd511db265d5", "comment": "Malware payload (Mirai)", "value": "494681674c24162e5081fc739a2f89d1fc9dcdff4b81a66ba4efa57c66095ae3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249691, "uuid": "2c8ee09a-0bd7-4ecf-b4b8-3b7fda920a1b", "comment": "Malware payload (Mirai)", "value": "e4a9ad8bbfa7a0e44c450394e6fc4e1534d23c59", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249691, "uuid": "1893a9c5-956d-44eb-84f7-7b0d6ef0a68a", "comment": "Malware payload (Mirai)", "value": "dad608498ac10791f4c1601348d7f88900ac830916a65bcb3721dc06c5a69f0abf5031e28244c305781a93436bcdb913", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249691, "uuid": "860099bc-d6fc-461e-8b16-68ea56e85f59", "value": "T1BC534B02B31C0E07D0A31AB0293F5BD197BAAAD032F4F684751F979996B5E365182FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249691, "uuid": "81a41fe9-d7d6-4524-a01c-211c777f1e94", "value": "768:6EKpj0oqkJ9RGXRnTmXbHmud5F+YGBMtxCpEMGu/eE9GCbIv6VxcNILaFV+tYSw4:s/41mmuI/2xgd3GC0yVxcNa++yrWE6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249691, "uuid": "552fd3c2-a8b8-4bff-9cdf-ac37c46983c6", "value": 63004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249691, "uuid": "2f550941-f2c8-4ac7-a500-5328d2af8556", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249691, "uuid": "7a2bbc81-c607-432d-8592-8cdcb2ab1a7d", "value": "ac53ba71faab9b6bd341f3df3ad7e43f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22d90e4e-ce1f-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708234361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708234361, "uuid": "d5ac3ac8-1675-4986-81d1-757bd2c88141", "comment": "Malware payload", "value": "dd8c09efa3899ac0fdbe2fe99586dbc0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708234361, "uuid": "d9546a9b-bdae-4cc1-9549-5942fdb32471", "comment": "Malware payload", "value": "4aa03ec99366be50f1727ebdab8fee3ee33f937edc34d7468accd1f8ea9ba87b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708234361, "uuid": "96337736-c661-4499-a7c5-e53abcb3b20d", "comment": "Malware payload", "value": "aca692aaeef88db1bed616cb001c31cdbb9b2e7d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708234361, "uuid": "c10e4630-7a97-4a78-be34-7370996c124a", "comment": "Malware payload", "value": "73302c220958a9f547edcfc9e71a613ae93093c8a79d9acf2681f3aa7cf0db07d11d085eff47dee6e69e33122cac1b2f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708234361, "uuid": "42cf5793-1b8f-429f-8664-c11a1fa26b47", "value": "T151F6F293B245D92EC34529B64D59D3E832E1BF248E45129334C0BF2FAFF62929D3B644", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708234361, "uuid": "00ce7d97-0a95-40a3-b89c-9442a7473002", "value": "75b4c3f96cc0be60ada66008668a0cb9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708234361, "uuid": "f00e0bd1-ab53-464f-8ddd-4d7587dacb95", "value": "196608:XE9R8DfqxjkEAls1KUL5pijFWrUBNUi7t61SUgwIcf1Yhs+zhrD8a6G:0TcCxjmZ05fonUiZ61SvwIOqLrD8XG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708234361, "uuid": "a9de0f39-41b8-45f4-a19b-13f67264a014", "value": 16622655, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708234361, "uuid": "3912fb25-e194-40f8-b1b9-0c18292169d3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708234361, "uuid": "ad3cd6e2-0289-4302-b9bc-c952a0f82ae2", "value": "\u00e2~\u00e2\u00e8\u00e2A\u00c9\u03c6\u00efL.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "499e0107-ce06-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1708223689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223689, "uuid": "8117dc59-cf79-452e-8952-e6058f80b139", "comment": "Malware payload (RiseProStealer)", "value": "118933631bbac6d5c68da361a5d93cd7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223689, "uuid": "1ceea326-15f1-46dd-a1c5-30b31774e6c1", "comment": "Malware payload (RiseProStealer)", "value": "4bae1f00ccc7e91b19d585333ba4cc918f8333f88974a5c22666a0fa221cb661", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223689, "uuid": "22611d90-4ef1-447c-8523-947fc5b0bc7d", "comment": "Malware payload (RiseProStealer)", "value": "755ac44e825804f3997682bc328644326b661377", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223689, "uuid": "78f7ccfc-09de-41c4-8518-cca6168e61dd", "comment": "Malware payload (RiseProStealer)", "value": "4265f14c4c007311a2197992b831774c1ae257c86669deae6914c18b5fd955303a296fc561647fcdca9471c1839bb468", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708223689, "uuid": "f47bab74-e657-4775-83a4-5555d398974b", "value": "T11F1512CEAD80406BE6947B7049C2FFBD125FEC80794850C96CEDBFA772739194926A1C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708223689, "uuid": "d88ee1a9-2d14-41b8-82b6-091d97a524b5", "value": "2388fee6ad8ce4f4a35dbaf64e2da01a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708223689, "uuid": "5d0877bf-8bee-4432-bf6b-7541974332f7", "value": "24576:Rpbr437eMf0M+Z1IQuZ9MsBx2gVmPaNAp+LVHcUwCRB:RprkD+OQuIsBYW3VHcUwC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708223689, "uuid": "97fecb71-9de0-4d52-85e1-1467aa0d8731", "value": 921808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708223689, "uuid": "d35e4634-1fd0-4910-aaed-79e19bc70dd7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708223689, "uuid": "c8577a7d-bf62-4364-bf5f-ba5ded7083e0", "value": "118933631bbac6d5c68da361a5d93cd7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb730407-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708278104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278104, "uuid": "6f5f38ce-0bb2-4cbc-886f-872baff0e6a7", "comment": "Malware payload (Mirai)", "value": "3a4f272f18a6e08af7a77a6b9074a522", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278104, "uuid": "5247507e-5e0d-44f7-9b15-b32fd488e8b1", "comment": "Malware payload (Mirai)", "value": "4c56f926b8545ca6e683c773f69b4884b8f88aa89e35e0a3723ce2005b3b25e8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278104, "uuid": "0e4b523d-abb8-4df2-bdbb-9d0cd44cb84b", "comment": "Malware payload (Mirai)", "value": "4cc5413a0f6af9d920711e97dcc24b266336b7c6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278104, "uuid": "edf28428-1b3b-4b0a-b8cf-a8de8f4d1115", "comment": "Malware payload (Mirai)", "value": "3f8b8128e9d9b73089a5e2f91a150841a310c8b6e3e6fa169dd673813560e0e9d8bbf0c0016f615fdd91383e8e6b38d2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278104, "uuid": "675ce09c-ab1f-4333-80b8-82d9fd8df8ef", "value": "T127D33B86FB409A13C0D61B77FA9F424933229B54E3DB73068D185FF43F86A9A4E63505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278104, "uuid": "04c421bd-88c6-4775-9221-5d414e522691", "value": "3072:53Auz6OTbehLh+BElUCpI3SQeTz+50IXuGYM/9gY457m:53AuzrTCh6CpI3SPT7IXu5M/9gY457m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278104, "uuid": "22445716-94c8-4764-b4f1-11acf93a1443", "value": 138499, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278104, "uuid": "f8d6abcd-393a-406f-a7d7-e628d34f5062", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278104, "uuid": "831cb396-e534-423d-82f1-19d5b0d06d88", "value": "3a4f272f18a6e08af7a77a6b9074a522", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44087409-ce56-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708258039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258039, "uuid": "1084c2d0-9614-4926-9530-763f850451d1", "comment": "Malware payload (Mirai)", "value": "c22ffddff2fe9d9c29714edc41def816", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258039, "uuid": "b97ada2e-40c7-40a2-aff1-f272b39ba31d", "comment": "Malware payload (Mirai)", "value": "4cfadcf9e977ec26b0ead4cfbcd8fdcb47dfbcff831c357df81d944573a7748d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258039, "uuid": "a7306c03-602a-41b2-a73e-ddf6013b9fc8", "comment": "Malware payload (Mirai)", "value": "31bbae37b583fe93f1240a6a9175781b6ec8e71c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258039, "uuid": "afb7dbf0-3f60-4f19-9b62-2a33a9ee6210", "comment": "Malware payload (Mirai)", "value": "b0752e58b07a306bcacf82b161464af7241677f504e9dfc7b268fc024fdcbf4d223312045f8efb0c84f48725c8cc5e1c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258039, "uuid": "e40f64e8-39a4-45b4-8746-3d96e1a9c070", "value": "T10543289BF8019D3DF40AA6BA94274D0DBD3063C113830B3667A7FEE3AD721695C52D86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258039, "uuid": "cbe72c2c-a778-4dbf-9e3a-eca3f9a61ca3", "value": "768:yUeGmdS2VqXbQUHA3/J3Qflu11JowM6ud7CyHEbz2XO8Sl0WnU89yAWyQN6gHxW/:hZ8Rw7jkbz+O8SuWZ9yAuN6A1rLq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708258039, "uuid": "a868fb40-5895-41c8-b3a3-66521138d292", "value": 56464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708258039, "uuid": "90ba5f5b-5470-43a8-8844-1008b63ff6a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258039, "uuid": "9267b7b8-bc0e-4e9d-a3ff-4499d5685bad", "value": "c22ffddff2fe9d9c29714edc41def816", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4af0df9-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708278066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278066, "uuid": "84f2136a-6636-4fea-9cc6-c60f6fb4d4a7", "comment": "Malware payload (Mirai)", "value": "475d0f1789fee7b171c6b3cd57eb6370", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278066, "uuid": "ccfe3b09-4b25-4b2d-a6de-e8e0b60830d0", "comment": "Malware payload (Mirai)", "value": "4eee56ba77d44b0d9bce080d88c97ec102baf798d44a9f3d1828963bb655a86d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278066, "uuid": "3aff6e67-22a5-4aa8-8e86-6892bb2e220f", "comment": "Malware payload (Mirai)", "value": "5833c24caa8160fd5ae7a8ad79aa6750841c543a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278066, "uuid": "b6b3138e-e8dd-40af-80b2-6594a6dbf862", "comment": "Malware payload (Mirai)", "value": "f6007110381c8a5f6733a3ecd1a6e89cec8c72d123da06432c43ee05abd50341296601c4f30e935d7363fd18ad4ab6f5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278066, "uuid": "fee0d2d6-df3d-4d87-a575-89f940b4610a", "value": "T10F83834AAF615FBBE8AFEC3749E91B45248D611721A87F79B930D814F20F24F15E3860", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278066, "uuid": "29976e33-44ca-4f96-8a80-967ea79b3364", "value": "1536:K0XSygcxUwLZ3JPzTTyT+ex/QZIt0uR+:5XSygqs/QK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278066, "uuid": "89a05e6b-16e8-4483-985a-b721bcc3e2cf", "value": 84120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278066, "uuid": "6061430d-dd84-48c0-90b6-a35bbaefbe82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278066, "uuid": "e3a74dc4-ba78-4092-ab2c-2391cf4d1c96", "value": "475d0f1789fee7b171c6b3cd57eb6370", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa1542db-cdff-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1708220979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708220979, "uuid": "d23b356e-ebfa-4c66-a1fe-8e6a0d9ceb5e", "comment": "Malware payload (RiseProStealer)", "value": "ff6be3e826728411d90a58ffe4834ca3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708220979, "uuid": "7d8d36b0-9e73-42e8-8860-e2b9b02e057e", "comment": "Malware payload (RiseProStealer)", "value": "51b53b4eb03653b96dd366128eabac45d17a56f6585a599496ae7fd47d77c4db", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708220979, "uuid": "ce4efa63-dc56-4be4-9c60-bda024f3f946", "comment": "Malware payload (RiseProStealer)", "value": "9838f26f5e5f266d29e5dd17b66951cdfd7449d8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708220979, "uuid": "3dc2af38-d88c-4a54-8530-749c43882746", "comment": "Malware payload (RiseProStealer)", "value": "c0f9b9bc47eb2a479358a12806994ab9ad79c43e838e935717b7f47ee47e5de8dce9ea95c2438bb1f4b7375850d06460", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708220979, "uuid": "33c26f9d-8396-4e2b-b8a4-c64a7621b57a", "value": "T1351512CEAC804563EB9436740CC2FA7D016FFC91B8A5A0D92DC8BB9B7673E19092355D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708220979, "uuid": "284467b5-ad43-4227-b6de-92e3a4fa05e7", "value": "2388fee6ad8ce4f4a35dbaf64e2da01a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708220979, "uuid": "75f2fb11-4e72-4e45-8e64-069f49f501f9", "value": "24576:fX90TYNdSRfL9ad1zQbmjZ5iNA354Nwf:fWTYSpCQMZ5SM4Nw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708220979, "uuid": "48bbb17e-2ddd-421b-94c8-2670ec76099c", "value": 921760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708220979, "uuid": "e7a4ca1c-8bfc-4ea7-9ec2-4a44393ae47d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708220979, "uuid": "0c8e7646-2f75-4224-bf2f-e49c8c7eaff3", "value": "ff6be3e826728411d90a58ffe4834ca3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fcdcb1d-ce56-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708258059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258059, "uuid": "2781c208-92b2-4277-bdaf-d216b5f8ecfa", "comment": "Malware payload (Mirai)", "value": "fa6ee8d92e40f37d16e0de8520364b27", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258059, "uuid": "8fb0a757-f241-4f7d-9c42-2d53a9f46425", "comment": "Malware payload (Mirai)", "value": "521fe16966972cc1020e2a66fdbe1edfcde182817fe994f508c80543980169d4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258059, "uuid": "14535659-eb07-4b86-bc55-5f279a205752", "comment": "Malware payload (Mirai)", "value": "950dd62b387483943017bef4da76e75241539a2e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258059, "uuid": "db8844f8-2ba1-494e-ab59-73b8644eb5ae", "comment": "Malware payload (Mirai)", "value": "846797e33a516193bb4e39c1487b9a5e79d55f138d97d10bd728ce51ccf65aade051d35c96c98b0cf799d1ebff2ca17d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258059, "uuid": "e3c86e6d-3b74-4b2d-897e-b9aa588a2ac0", "value": "T1DDC34C46F7404F13C4D6177ABAEF42453322A795A3DB730699285FB43F8676B0E23A06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258059, "uuid": "7482452d-2eef-4104-8893-59cec5770661", "value": "3072:6mzw4rB48eN3bcz3TNzcp+006LfCM/9wkvTcOQpmWXpAsV:6mzw4rQN3bczjN56LKM/9UPmWXpAsV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708258059, "uuid": "c6f873ee-c4b9-4e0f-a990-2c555f5f4f8e", "value": 129356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708258059, "uuid": "bf5253e7-113d-4af9-bf22-a69ee548392d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258059, "uuid": "45df7465-b558-4cf3-8ddb-17b139db4e8e", "value": "fa6ee8d92e40f37d16e0de8520364b27", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ab3f64d-cea2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708290612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708290612, "uuid": "0599ef17-1819-41a0-b903-3db54270d6ff", "comment": "Malware payload", "value": "64e23a193ad93a1f3201d287c8ba2e51", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708290612, "uuid": "a1627e10-9974-4b6d-940b-735c020bcfa2", "comment": "Malware payload", "value": "54815ca3d48244d0e708d5e7976c723b9f63de83e67d8480ddafe0909121cceb", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708290612, "uuid": "89b39cd3-baff-4208-bfc6-badea6bf9cdf", "comment": "Malware payload", "value": "233f783ace5164d124aa3f12e829f3bf77d63767", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708290612, "uuid": "9ff1af0a-eba1-4026-8b3a-ba599e15daf1", "comment": "Malware payload", "value": "2c665018049e487d39b53825ac722d3391a2e9c8410b27625a95a5b9427a6d8d84a784928a32ac8090651887de2068fc", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708290612, "uuid": "1ee95d72-6827-4c06-9306-92236b8acaf5", "value": "T150A4E69063FD1D25F6FE2ABF99B115801BF2B943EA31C21C0EC154DE0931E1A9D29B97", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708290612, "uuid": "2be3614b-5537-452a-b7a5-aca1f5ea4ddc", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708290612, "uuid": "ff48489f-15aa-4925-b695-b369b5c41002", "value": "6144:fJxSqVcow/EE9XHbutukdTRpMCVbHB6Wr0mFfHCEU4XuHc2aLx2:xxSqVcME9LutDFR4lEXPzF2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708290612, "uuid": "2e51f5b4-4b2b-4770-9099-674eeff79134", "value": 481792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708290612, "uuid": "4314a5f5-c118-44fa-a59b-b26c50730e12", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708290612, "uuid": "59afe637-2208-4f1b-8097-5f64c1ab710f", "value": "ii's Stupid Menu.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66ddcb37-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292028, "uuid": "b70e6739-734e-4102-9821-e3a252e04940", "comment": "Malware payload", "value": "64a3d4fa1b42fb0d291469bea507f9ed", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292028, "uuid": "a4ce39da-0355-4f1b-b4bd-193b0ad06e15", "comment": "Malware payload", "value": "5578a78576a35a6a95c8a5372e7d498fd4d2a4d5d7abe7369a14307d578192c6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292028, "uuid": "3228eb0d-23b5-49e3-bc96-22bc7669f56e", "comment": "Malware payload", "value": "f9a9aaf15c2b09fff7d4681c5112b48711094056", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292028, "uuid": "9249d73e-7061-47e0-91f8-cd56a5082bc3", "comment": "Malware payload", "value": "815a8038f6b742665f96cce6dc4bedda4ba6497efa5303d580eaeee42ef95f29b58d1695c57b4fd9b2d4fe36535317e2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292028, "uuid": "47eb64cd-a5c1-445a-bdab-6f51912aabdd", "value": "T1BB7423CFB69A5418DD3626F3DE5652383B1574580B460EFF9D6B6E20B010FA95D28F03", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292028, "uuid": "a14c66f4-694c-4cf5-a972-8a411d33c2d5", "value": "be49a2411263045f8ee0c442783b5f83", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292028, "uuid": "6571a346-2f93-49b3-a1d4-11b3921361d5", "value": "6144:g2qezd2ab1/RuHk+M3k8M3W7XomjOJCqshrOlumY6DMIewgxQfq8sb:gf2R/EEkCQFYDwRqH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292028, "uuid": "7a2b5d85-39c1-430d-af6f-cafb68de66d4", "value": 363520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292028, "uuid": "2e33b0fe-a429-450f-8782-d14175c083f8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292028, "uuid": "23caf0bb-da24-4ac9-ad85-86e3e9391ac3", "value": "SecuriteInfo.com.Win32.Evo-gen.24852.20254", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e179b74-ce3b-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708246594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246594, "uuid": "fea80b2d-acdc-4c66-bf7e-7e3d401a9ae8", "comment": "Malware payload (Mirai)", "value": "c57103b79a7294521f203f7ed1f38b78", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246594, "uuid": "70c2115a-baaa-4174-bef9-abc296e176eb", "comment": "Malware payload (Mirai)", "value": "574efc3a50643566de36a5e66697b4fa86432112a05c64d70510c42d08845f42", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246594, "uuid": "289e34ad-17be-4a25-889f-629bf7cf0752", "comment": "Malware payload (Mirai)", "value": "90e0e4921e179d827439141aaee4cbbae508bebe", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246594, "uuid": "638f4d53-a0fb-4aad-93ba-2ffebb54fdf8", "comment": "Malware payload (Mirai)", "value": "4dff2dcbf201d4d42c13e6abe9c58ff6dc301aa3c70a54a212a10e6759a76eebc079dcc5d4621ab29202ac96c2df00cd", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246594, "uuid": "6b3dd5c1-7d6b-4e17-a163-ded89b5b09e6", "value": "T187531817F58182FDC099C13417BAB93AE92734FE0238B6A67BD4FB263D46D211D0AD49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246594, "uuid": "bfc979c0-6006-4f2f-a14e-d2bfa87ecf3f", "value": "1536:bklYu9RPiANIzTtAmIoR6mv8Kmy23hB8BQX0cxygcYNLE:mYu9UEIzmXoRHPEcBgygcY1E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708246594, "uuid": "db39c41a-0e44-44cc-bb5f-207de96cba44", "value": 66224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708246594, "uuid": "2c3ee46e-cd07-4319-a4cb-a4dda9f068d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246594, "uuid": "de34ae76-7342-43fa-b6b3-5e0c75504c86", "value": "c57103b79a7294521f203f7ed1f38b78", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cb10e34-ce06-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708223694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223694, "uuid": "d3587b6f-08a2-4592-80e3-83892e5c21af", "comment": "Malware payload (Mirai)", "value": "b547e6c17218cb2ae3e92c1a9e0803a3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223694, "uuid": "1f9746dd-fdf0-4ce3-a5b5-bc939632511f", "comment": "Malware payload (Mirai)", "value": "5778055277fffc6ba460b20ec6a9827cc1c7820f6a3cd488dd9bca0d04256bcc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223694, "uuid": "f28f9b4b-bc06-44de-8d6e-114e5984ea9a", "comment": "Malware payload (Mirai)", "value": "46f6ccd329a8c365e40be0dc48c46c2859b4b795", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223694, "uuid": "5747c08e-dd8f-444a-8048-7e50fa2b8569", "comment": "Malware payload (Mirai)", "value": "01a849a662cc17910b7ef1221f868b2db240b7f812668878b43c6264cacf93ff6b95e7f99fe88bec9f1171f7cfd1235f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708223694, "uuid": "bfa57551-11d1-4e58-a9eb-664ec2e6f8e5", "value": "T1BB33F150E23CA030F1026936E7AA58C498E4A3E0F1EE33B56746954C79D0BC39FF95AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708223694, "uuid": "78ad7b0b-2bb3-40d3-9fe1-867ee5b3229f", "value": "1536:4ZnqdYGfD2J1efoOwZeMlGOFx17L3LsLrs75/W:4lPGLxoOwcpOFxFzLaY7A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708223694, "uuid": "c47a0f19-9899-4b88-9642-20fd2da781a3", "value": 52524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708223694, "uuid": "c6e8c03d-f9f5-4692-bb12-70432fef6b6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708223694, "uuid": "3072603d-417a-426d-bf88-c9fa4f70682b", "value": "b547e6c17218cb2ae3e92c1a9e0803a3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d18ab6f5-ce4c-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708253982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253982, "uuid": "444ec259-0c88-49c6-aece-194d4a2e73b7", "comment": "Malware payload", "value": "4dfc0d700efa6013b3b7c5719ef9eb67", "object_relation": "md5", "Tag": [ { "name": "MEMZ", "colour": "#49A113", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253982, "uuid": "294fe723-40c4-4a9e-8127-be18ab124c19", "comment": "Malware payload", "value": "5b73b5161e8c17b9ddc58e5c8f978a43377a403ae1b91667d90e133be842b008", "object_relation": "sha256", "Tag": [ { "name": "MEMZ", "colour": "#49A113", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253982, "uuid": "1e39dd1f-2251-49be-95ad-0c4a0443e898", "comment": "Malware payload", "value": "d753340b56f3fe765c944f61742f7b8f9c96e873", "object_relation": "sha1", "Tag": [ { "name": "MEMZ", "colour": "#49A113", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253982, "uuid": "6d7f9f55-2881-4712-916c-711a74d0af46", "comment": "Malware payload", "value": "754ffbcccfda9029850bdca006263156c89e6fb5b5a99b1f76ac3146e8bed1d855adaf303b6cac4cc2304839527cf89d", "object_relation": "sha3-384", "Tag": [ { "name": "MEMZ", "colour": "#49A113", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253982, "uuid": "392bcc64-5e1f-4b65-a8e6-55cce7b301e5", "value": "T1EB24D03889399468C73F5930DF5EC4CEFBC298056225A41FBE6041D1EB7AD922B36F19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253982, "uuid": "f02b1e8c-d92a-4597-8079-3ca0b3894f55", "value": "3072:GRc3btnFfCDY096P8uP4TMCyY/GgB+rt0Ljoy5FTUy+K2B4YaGRzehnm235+mJxx:GyLDGor8MCrjB+B0HVkBj0hmAhJAFdJo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708253982, "uuid": "0dac65a5-c6ec-45db-b1c4-382a6c71fd59", "value": 223613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708253982, "uuid": "c01671b0-6d08-49f2-9a7d-5bbb0a3b03b6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253982, "uuid": "15ae119e-1f9c-42a2-a3aa-5aba478dba3c", "value": "TheMEMZ.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0148068-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708278085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278085, "uuid": "b577d0a6-82b3-4e71-af39-08589ef74a9b", "comment": "Malware payload (Mirai)", "value": "46b41cf2ebbd1f8d6822f7af8ad4fc48", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278085, "uuid": "54ea51bd-5160-4652-9ef1-8505773ce4d0", "comment": "Malware payload (Mirai)", "value": "5c99ba5ea95c3f9e55d31a0b42e1e327a2bd5d103f52178a3a817792149c6a24", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278085, "uuid": "438e27d5-f91f-46d6-b1de-7b1d98338b0d", "comment": "Malware payload (Mirai)", "value": "68b6be6c31ede91df9493ca5064e962cd344eb97", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278085, "uuid": "a65a4870-8054-4f2c-9e39-81b0fd480f63", "comment": "Malware payload (Mirai)", "value": "7c981a351d63868dea9f203c42c87e2164fe9ca4e735d84bcc5880656b4d5ddbfa59c89b39e4b40e266fb965f5bd2677", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278085, "uuid": "e9ce384a-03e3-4881-a19d-9669291f2686", "value": "T1AB731986B9419A10C6C517B7FF1F014E33035798E2EEB3239D145B647B8EC5F0E2A65A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278085, "uuid": "acaa0f2b-f618-4d95-b6af-e0d9e03e0093", "value": "1536:FNnYwmy6+c1jEWS16iT3rtqtli/NkCzVL9D11K7AyCcsI2i+GSdTL88h:IwuEEKbtb1hL9D3K7aGYTL88", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278085, "uuid": "ae061b57-008d-47eb-85dd-ea06a2d19f9f", "value": 75056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278085, "uuid": "20391129-7be6-4385-b931-b9e6ee5538fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278085, "uuid": "f23d9329-05c2-4ad8-97fe-e247f1d0f075", "value": "46b41cf2ebbd1f8d6822f7af8ad4fc48", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c52270c5-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249666, "uuid": "6d160683-4a7a-4691-9f56-2d6a5357e09f", "comment": "Malware payload (Mirai)", "value": "29324e100067bfaac88e161c913b0ccc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249666, "uuid": "6740afc7-702b-4c3a-9c3b-72446b7ed003", "comment": "Malware payload (Mirai)", "value": "5db49b05b0d5c6ff60cf17e023b36c1640901577b97923b3b0a467b6da88b0ff", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249666, "uuid": "2b4e2e8f-4225-4885-b8cb-43dc06c91a95", "comment": "Malware payload (Mirai)", "value": "7ab6e1da59b6edaaca080f6477840c75225784b1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249666, "uuid": "f1ce3a48-3b94-4ecf-b205-6ab62a716e9f", "comment": "Malware payload (Mirai)", "value": "8d5ba29712bf2150bda8ca8c5c2a9d188ee18fb8717958557a1203624f4af561c37a7eadceffa8e2381606f951972cc0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249666, "uuid": "30b336fe-dbef-4967-ba2e-1134c941c16a", "value": "T1DED32A06B30C0A47D2A32EF03A3F67D093EFAAC121E4F640355FAA899175E365585EDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249666, "uuid": "1ca6efd3-821a-41f5-bf7b-73d82e8c1749", "value": "1536:WUHQLSWPrHYOlIA5gAizmJxpHvTHNIQjFcrgiCbPMPHvANIKUjjWfM/qi4kkxN/n:9WPrH+VzexZ7H1cgZPMANlxNbWw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249666, "uuid": "94525dc1-91b6-4812-9949-ca74f300e5c7", "value": 132376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249666, "uuid": "6598f650-b911-4f29-89f0-1412ebbdcb7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249666, "uuid": "d9c3fad9-c250-444b-85e8-07a112a0a0a1", "value": "29324e100067bfaac88e161c913b0ccc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e20acf0-ceb4-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708298563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298563, "uuid": "2bb238df-cb8a-48e9-85fd-7569cddd4b85", "comment": "Malware payload", "value": "e254c25300c73b9b21886d5ebda75c3b", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298563, "uuid": "57ea45e3-1e11-4d13-adef-50257e4aba32", "comment": "Malware payload", "value": "5effd528810a7e1c0fe7b6860470f5a1128102846145930aa16e0ae59024c945", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298563, "uuid": "e8d2733f-e4a5-4723-bf1f-3f580070d8a3", "comment": "Malware payload", "value": "83a03845e91f75dab97346fdf1b75287cfd7b0a3", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298563, "uuid": "69b13878-2aff-45fc-ad85-d857869f179c", "comment": "Malware payload", "value": "ede51dbc78fb4b1632a081dcf7d9cec3987b28fb85c3d0c2a2d2d5426e93605f1b78b6f6e484884baea8ce16e156310b", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298563, "uuid": "b4c6de43-1765-40d5-9a93-a6d56c932965", "value": "T14A04120FB2B66515E4DEA5309305C05ACB0DEE5222AACF6A1176BD5EA8377307F0387C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298563, "uuid": "fb8f4aa7-e8ef-4408-8038-32ccc2d84af3", "value": "b99ecc0993b712b07f8ff90c6f40994e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298563, "uuid": "e858a6c2-2c8a-4627-a9e7-4f9c4be53159", "value": "3072:ITVjZ37J8GO2f2xL3cEXAepD+DwmXrKY11WXQZjlUk0MzKt2NDmjd2:Uz8Ofu4IbqeYzCQVlUk0aKcN6j4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708298563, "uuid": "6318304c-608e-4232-bd88-5181b45c4b5f", "value": 181650, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708298563, "uuid": "a85ca4f8-d6a0-4b09-90d5-c56d67a164cf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298563, "uuid": "ed7ed73d-820d-4aba-bf1e-2692bb248c12", "value": "SecuriteInfo.com.Win32.MalwareX-gen.27832.20986", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1cd6e88-ce58-11ee-b7ea-42010a9c0006", "comment": "Malware payload (IRATA)", "timestamp": 1708259136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708259136, "uuid": "93c57db4-c49f-4489-94f1-b47bb2afb1ca", "comment": "Malware payload (IRATA)", "value": "7e1f4555f0ba56fd92f0d7178e0aedfa", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708259136, "uuid": "e3bfc77b-b2ef-478a-a7f1-6cc9caa0dd05", "comment": "Malware payload (IRATA)", "value": "63d4bbdf67d469a1709add4a77c0e5a58112b8482b22bf3e2b4563323980c785", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708259136, "uuid": "740eb6ea-6a1e-4ea1-b4a8-6cba0319072d", "comment": "Malware payload (IRATA)", "value": "71e688c39a4367c5e07d75e46c845b958b524078", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708259136, "uuid": "77890e08-f11c-4bea-b484-a413602dd727", "comment": "Malware payload (IRATA)", "value": "c5a8a269ca0beec520946192f645d059bc62ad5a04ee3a38b2cdf0358ddb68f1c8497839ec7f58bd66387c44f852f10c", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708259136, "uuid": "cd1b0900-1c59-433f-9245-324fa33080da", "value": "T169162353F3AA5617CAB7C3712066197A103A1D2AC703F78A34187BFA78BFDD80B85594", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708259136, "uuid": "21b60524-c423-4e05-96ad-99efe2c5dc65", "value": "98304:zGZTSHh5MkkmXedcyqvR92G+QULZzpDv4D1KKaja:zGZTSHMaOup92nQUlzpbYkKMa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708259136, "uuid": "96da3d9f-397b-41c2-b8e0-a4d9f5a0941f", "value": 4039069, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708259136, "uuid": "c94aa505-9722-41c9-a6b8-458471b45432", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708259136, "uuid": "ce1a91e8-2923-445f-a342-2497acb0c393", "value": "sample.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f35467d-ce79-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708273091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273091, "uuid": "1877ee89-e5a5-48f6-a988-b3f1ede6416e", "comment": "Malware payload", "value": "1358ebf88ddb8dbf307fb36a743ece74", "object_relation": "md5", "Tag": [ { "name": "cab", "colour": "#C58E2E", "exportable": true, "hide_tag": false }, { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273091, "uuid": "578575df-3f8b-4488-a865-18288ec622b2", "comment": "Malware payload", "value": "65f698e9858682c12359d540459446b4f2ab2ca161328e0fb586cdfd39fff7a2", "object_relation": "sha256", "Tag": [ { "name": "cab", "colour": "#C58E2E", "exportable": true, "hide_tag": false }, { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273091, "uuid": "02f09d61-a1ed-4c57-bb1b-81cf6e894ac6", "comment": "Malware payload", "value": "8d769a17ba38f50e7d245767742742b489aaf276", "object_relation": "sha1", "Tag": [ { "name": "cab", "colour": "#C58E2E", "exportable": true, "hide_tag": false }, { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273091, "uuid": "278f83e8-ab04-44f6-8113-14a041852883", "comment": "Malware payload", "value": "5d5900bc499e8514819453441cd75023252d85b59675c46716a877f09b43b0780384fa66849a4b910f36253403ebdf06", "object_relation": "sha3-384", "Tag": [ { "name": "cab", "colour": "#C58E2E", "exportable": true, "hide_tag": false }, { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273091, "uuid": "82e5db50-10ea-421a-8d16-a9291085c386", "value": "T1FD658C7DA8311D3CD03DAD3C4F7A75EC7B6D6961B8986C422EB48A5E0AE01453A0D39F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273091, "uuid": "e9b3dc1b-9291-4a73-958d-874d4c17b81d", "value": "24576:f/H1m3KSmrpSsDhqzpruGnrNoAsM14uiHd67k:f/qMp1h4prxxoAsued67k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708273091, "uuid": "7eccbd57-d515-4bf7-9ed6-18ab29948656", "value": 1428459, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708273091, "uuid": "ef79c0f4-3e14-4ac9-95fd-a18083566216", "value": "application/vnd.ms-cab-compressed", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273091, "uuid": "8af02a54-3886-44f9-a4be-407ac0695744", "value": "VBG dk Payment Receipt --doc87349281.bat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a54a63bc-ceb4-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708298575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298575, "uuid": "8e84f0d3-5a69-418a-99a9-4d72459b8fcb", "comment": "Malware payload", "value": "e4c66beb703aba9c8e9757e406011ad2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298575, "uuid": "81afa68d-3dd1-44af-a537-af1e5582c50b", "comment": "Malware payload", "value": "6790369601f77e46fd83f8324d09731bc829e4caab433d93716a8a18450b88b6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298575, "uuid": "e0f15b69-fc8b-456c-8493-db4bea255c6f", "comment": "Malware payload", "value": "25eceb05618d5042ba7b5531a98b97f620307121", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298575, "uuid": "8a7fa7b7-721c-4eb5-b0c8-2240bdfcd3f3", "comment": "Malware payload", "value": "aa73cb08f25a182516a88eb7b2860a42361eb8399721e6ca9ae03fc93019477f07241c7ae7c061a9b394ec8026b461be", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298575, "uuid": "11e193b5-73f0-4dec-bf87-2a753568272d", "value": "T1EFE4F1563BB01608CAB6D331C576E48D9839BD5E7931FD1A7260391D4CB2ABEBD24323", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298575, "uuid": "b52822cd-af3b-45bc-be21-f928a7aea65b", "value": "12288:Cn0UC4kTFxc/dXXI+W2V7qwQbuc2hE9Wl/k5o0yGQA2rq:C1C4kTFm/p2QWLqa9Wl/k5o2Pz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708298575, "uuid": "46921f74-9df2-4a46-9aa4-fb096e3cec4c", "value": 685056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708298575, "uuid": "80ec9c80-9481-473b-b421-ccee6d0cb586", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298575, "uuid": "8b0aaa30-b00e-4e9b-8320-a61f665c95b8", "value": "SecuriteInfo.com.W32.A-62389890.Eldorado.626.19301", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cc5ee90-ce48-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1708251987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708251987, "uuid": "eddd143d-7096-4f2d-822b-c6f5cd7c7f1b", "comment": "Malware payload (RiseProStealer)", "value": "b7caeb04a5aa03858a2af76a73cde0ce", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708251987, "uuid": "831abfc2-d831-49f9-9d82-08fbeff6099f", "comment": "Malware payload (RiseProStealer)", "value": "67f998459a1afe82a98a482dd5c84bb6c186b72303a3af9be0f6618a3e552d65", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708251987, "uuid": "93b4f88e-5438-4232-86d1-fab8071459c1", "comment": "Malware payload (RiseProStealer)", "value": "c5419c7d77d028d177c2a45a0efb0341e6e90917", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708251987, "uuid": "5cc25a41-e539-4703-adb3-3e700cfe1a5f", "comment": "Malware payload (RiseProStealer)", "value": "d5a6034ee03ebb4c4fa6951d3db68126cf5bed74f5d2ce6423c44336095a9e0880cd742821008fc2b514888d6fd2f4eb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708251987, "uuid": "e7c002d9-3f41-4885-9df4-22c8b86ec52c", "value": "T1811512DEFD404493D7557A7409C2FBBC012EEC92A98161ED7CE8BB5B7E7281A093209C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708251987, "uuid": "b357d684-f198-4e3e-a290-78ff4b3b0d32", "value": "2388fee6ad8ce4f4a35dbaf64e2da01a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708251987, "uuid": "5dfbbd13-9922-4552-9e78-11b1c51f9d85", "value": "24576:VRtVXoQA6WwKp+Dm0REqjTjsm47hJxzStQYO0qlH:VRtFQ4Dm4EyTjwxzS6YA1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708251987, "uuid": "954c873d-5a42-466c-84b6-0b8ba8994a0d", "value": 921728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708251987, "uuid": "abeb5a18-eca8-44da-9073-e7d25229576c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708251987, "uuid": "23e38c9c-b369-4743-a004-677e523f94b7", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105649.13827.32664", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e10228e-ce56-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708258029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258029, "uuid": "5ad15422-e3f6-402d-90f6-4a3dae0977e9", "comment": "Malware payload (Mirai)", "value": "ce590d19552961695bfedd79e49a2e68", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258029, "uuid": "fd550780-9fc2-4a48-9b29-06e6ef4d45e1", "comment": "Malware payload (Mirai)", "value": "680787abb0e6c855a1aac6c7d43dde11b36fbf69f9666a32864107d408007ebf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258029, "uuid": "97de274b-c0e1-4c69-b394-5cee74de2b90", "comment": "Malware payload (Mirai)", "value": "337f9931f4862f8be2d893cffb7f9facf0783df4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258029, "uuid": "ac1738c6-1c01-4d93-9f2a-ee207c7dd3dc", "comment": "Malware payload (Mirai)", "value": "391c7223ed93cf351e48372ca14db31a7bf0b94bfb648cf0654c6655500cc3fd4b0289b33ff273b89ac049c869cffc90", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258029, "uuid": "ab01db80-e724-4b26-b353-7a8e6c16ba04", "value": "T169434B5172280B17D0932A70353F4FE09BBEFAC025D0F686B99F9B968935D330546E8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258029, "uuid": "801b4d67-ab79-4af9-af1e-97bd6f3c5b5b", "value": "768:zaVVRLWYgnvRYDCi1jAZZkXboPiq2PdGqthiT+eN4b9qKnZY10UrP:EVUv8CiNS26TH45Vna10iP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708258029, "uuid": "77538bd9-b0dc-4f80-aa79-46d782cbc805", "value": 55908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708258029, "uuid": "7114df5e-5b50-41e7-872d-459664b98dae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258029, "uuid": "6a8460ee-77f3-4805-a443-fe6e77dffde7", "value": "ce590d19552961695bfedd79e49a2e68", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "884ad2e6-ce95-11ee-b7ea-42010a9c0006", "comment": "Malware payload (STRRAT)", "timestamp": 1708285212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708285212, "uuid": "39d8c1d9-da5e-45ce-829f-37e94201cd7f", "comment": "Malware payload (STRRAT)", "value": "82ddfae819b4cb46144b03c2d68377fb", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708285212, "uuid": "7ff6a6cd-6721-4092-84d0-d2b4d6f9763d", "comment": "Malware payload (STRRAT)", "value": "6b227cc81bae5fbe74537e84b2a57c5761a63b0b6bf26f84c305e56c2c4255ca", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708285212, "uuid": "3a87f11d-bd87-4c30-b6aa-2c9a4759ed69", "comment": "Malware payload (STRRAT)", "value": "49d56b3c003c095d746c1fe3500dd06f4eacb704", "object_relation": "sha1", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708285212, "uuid": "fff53a06-3644-4605-8d9a-efdc813f2a8a", "comment": "Malware payload (STRRAT)", "value": "da7cbad3ce13d3be95a0dbe511ce079b5559ada11336eae896d9ea07b45c51d2068d8c4793f939720f7b9b4fe6445dc3", "object_relation": "sha3-384", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708285212, "uuid": "b4780609-9af2-4366-8475-d08ebd85ec1c", "value": "T17F24013AAF82C1B9C107647225888377631B5B8CD684DB1BAAEC69067D31DAD1705ECF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708285212, "uuid": "d45265a8-a856-4524-ba17-326f67bfa0e2", "value": "6144:0sC8dJ2Hf/ljpxyAzy7RpUV7ly1TuVPYVmyKg:0sbdo3j0Aci7ly1mIKg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708285212, "uuid": "5485d89a-7f6c-4ef7-957b-44873ebf3247", "value": 214446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708285212, "uuid": "b8ed08c0-aaa8-4459-8c09-cbe5e66d6de5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708285212, "uuid": "285a5433-1aad-409e-9380-50cf7ebf369e", "value": "FACTURA DE PROFORMA.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0691ce1e-ce5d-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708260943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708260943, "uuid": "6d2be1a9-8b7f-4c9c-a228-f42efa26e987", "comment": "Malware payload (Mirai)", "value": "5c0ad5b00fc57dcf047196949b291b6b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708260943, "uuid": "e891c608-9b79-4529-b95e-4cb73c4a85a4", "comment": "Malware payload (Mirai)", "value": "6b7b8cded297bba2a1e8d39081722722db235cec0c116381ee28838bf014a8fc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708260943, "uuid": "41e7cb1b-da09-40d6-9202-ca7f983af5ed", "comment": "Malware payload (Mirai)", "value": "e112732ce42dd135e44b7c7702cb178994e5e06f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708260943, "uuid": "9db8becc-0a1e-4e90-8fb7-13caaaa01651", "comment": "Malware payload (Mirai)", "value": "9d5193f588b6b4799e8d77db86ad87899664e8278664411a9b4759eaf3c7379c4b103bc20574a4f245dd45dd3bd4f802", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708260943, "uuid": "5b5698ec-b638-45e7-90c3-701caa34af04", "value": "T1F3B24A35FB230C7BC0A19A72A5D30739B7F6420B55AB8B1A38060E9CAF51F4465673E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708260943, "uuid": "7d6859a4-43b2-4b90-9037-f68685fc4383", "value": "192:IarlJe5XV2uZVUCyu4P0eB6kd+D2rrPllTTTo0GBL0f9x14On8IyebTt+QzM2SjG:/elFU+cxGDATtXg2Sjm3PiLx3hpBIRM4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708260943, "uuid": "f53df72f-ba5d-45a6-88b7-bde27532581a", "value": 25299, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708260943, "uuid": "90a42151-2b77-42ae-bb89-1b8c412cb339", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708260943, "uuid": "575a961c-dbfd-4590-9f26-063217af6d23", "value": "5c0ad5b00fc57dcf047196949b291b6b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6122c472-ce3c-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708246921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246921, "uuid": "6afc4184-f2cc-452c-aea6-90e0dad5344e", "comment": "Malware payload (Mirai)", "value": "244793527c23e7e0855595252a979604", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246921, "uuid": "bbf52e6d-77e1-42e2-8f62-7daa30688dbd", "comment": "Malware payload (Mirai)", "value": "6b95bc24df4d3d7edb314e7c692561495e36a8e8f4af5a705127827c03e5b565", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246921, "uuid": "60c2b0a4-5c8b-4833-8f4c-b56f95ff9ffd", "comment": "Malware payload (Mirai)", "value": "9fb045f5ebe02c5e880ddc731da99958c145cdf8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246921, "uuid": "e639480f-1b62-4d99-b0fc-b0c8deb8b6c5", "comment": "Malware payload (Mirai)", "value": "e809abc5fc3325c36163a007ecd049a928b8ad65f24e82ab0f72e21cc5781a8b2571d115d11f5d7a7d83eef9b1aa9117", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246921, "uuid": "96c9dd0e-8837-402b-8aaa-7e57c5b4c7bc", "value": "T15D93E705BF610FB7DC6BCC3709A91B0529CD955B22E47B36BA34D828B24B25F19E3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246921, "uuid": "a0969b34-626d-49ca-bb9a-416bd25aa2fa", "value": "1536:WMdJKiESq2A7GOQGOphoTItggCKp3kWTZ5BtFFJa103:WMdJKixqF7G/GqhoeUED4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708246921, "uuid": "1ec7739f-492d-4804-ae0c-b87ccb2ee757", "value": 89604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708246921, "uuid": "07a3a022-d90e-4832-8cf3-8b570128f18e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246921, "uuid": "bad39826-16d4-4b7b-855b-5d091378f1e6", "value": "244793527c23e7e0855595252a979604", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "934537ee-ce2c-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708240133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708240133, "uuid": "df4819d5-bbce-4a90-bbef-16f76e937b0d", "comment": "Malware payload (Mirai)", "value": "2e5f3c2a22eb8a45cd0cf24881abf31b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708240133, "uuid": "bd209133-08dc-4c99-b874-7431ea31f4a5", "comment": "Malware payload (Mirai)", "value": "6d5822edded5c6176ba6959e4bd3187126780eb9f6f63a1be6be3272a2556fb4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708240133, "uuid": "9328b49d-b47d-46a6-b824-f6983c1114e3", "comment": "Malware payload (Mirai)", "value": "6fb0097fa7f070ae9a7c886992f493c19cc116dc", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708240133, "uuid": "0e207f7a-0b1e-4c57-bbe6-8ca83c299c37", "comment": "Malware payload (Mirai)", "value": "dfa1326038c7e4c831b7ad69c369f6de17dda7cfb89c20c967b0e95dce078d8a0093e30880fa41a0f7abc5bac0d771b1", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708240133, "uuid": "d64d8777-cf0f-47e7-ac9a-5f9353f6e238", "value": "T191042A46EA404B13C0D727B9FADF424633239B9497E773069528AFB43F8679E4E23506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708240133, "uuid": "349989b4-d866-4be8-a9cc-1245b1af6f76", "value": "3072:8xbCWipkFzcGXIvaYrfB7XM8cgUCBIKUPrrboTM/RFIS:8xfFFzbYvaYrfB7XDBBxUPHETM/R/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708240133, "uuid": "97764c94-bc2f-49fd-9ca2-de07a6b4813e", "value": 183944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708240133, "uuid": "883bbc51-f3e0-457e-94a7-8bb672043368", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708240133, "uuid": "3d6e359a-484f-4320-bb5f-97f4e5113edc", "value": "most-arm7-20240218-0708", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b76b56dc-ce69-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708266393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266393, "uuid": "f2ab675e-bc11-47a6-8416-fe7405a246b1", "comment": "Malware payload", "value": "01c33a5356f1f6aa2bd5e140120a340c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266393, "uuid": "0a1507f9-e29a-448a-8014-6b3750c4f6e6", "comment": "Malware payload", "value": "6d6721fd158d9bd8d2cec6c4c8e83c77f220e4453c3465988d9b3bfce27b1c32", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266393, "uuid": "6aea4075-27a6-4a34-8682-66688534e327", "comment": "Malware payload", "value": "9b6d61b8d1d12adcf4b52e139afd1255cee29523", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266393, "uuid": "e5a688d2-0414-47f3-afeb-3aa864ac3883", "comment": "Malware payload", "value": "dac478addb212f7f42c47392d578756115370e278eddcb6904ea86e8fbc33cf5d16233f2a070b254ab14e5bac7c5c547", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266393, "uuid": "b63831b5-eebd-493b-9c7d-b09054423477", "value": "T15FF28D2563E9C372D9FF077444A2A2A153FAAD08DF12E62F3ED0714E0973A408F61B59", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266393, "uuid": "6466dd7d-6962-4678-91bd-a70e489567e4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266393, "uuid": "88aa979f-b75b-4d7f-b757-ced8f00c6135", "value": "768:wb5Mx06IrKZiuOR70qf2WO98B51JQNoWo0z:wbKxJZiuOR7hu9wDJIffz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708266393, "uuid": "f2338d79-d2c5-49ef-8633-744eb85b6d47", "value": 36864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708266393, "uuid": "8c943b38-8e67-40be-be16-06fab218dac7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266393, "uuid": "76a610d9-f55d-47d1-9dc2-241e85682ad0", "value": "SecuriteInfo.com.Heuristic.HEUR.AGEN.1308254.30877.21250", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c8d4d0d-ce3c-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708246914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246914, "uuid": "c7712ad7-d36a-4825-b20c-eaf1dc6ab016", "comment": "Malware payload (Mirai)", "value": "984657006436d4ba8ec04a61ced46045", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246914, "uuid": "1e050fed-0796-4756-a592-3bb3f96993f9", "comment": "Malware payload (Mirai)", "value": "6e409cb2a32dfbc6ca5df7fdf63a02d92a3a85fd9450941667863d195386a6a5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246914, "uuid": "b8b8a21b-699f-4203-b5d3-6fb49df8e8df", "comment": "Malware payload (Mirai)", "value": "33db4bc90329399466adac242c7e6c4c1b9b1206", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246914, "uuid": "9f56fc62-3a5e-43cc-b336-68621c8ae8ab", "comment": "Malware payload (Mirai)", "value": "02492bc09b39ecfc0f7facbdfda5fe400635c0d182280957ee17457265e0a33cdd661baa2bf99ada672fa1503c0f551a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246914, "uuid": "de40aeb7-edf6-49d7-832d-0369216751ab", "value": "T1B6430966F8829B3AC1D0627AFAAE568D333073E8D2CF3117DD601B517A8A41B0D67F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246914, "uuid": "a7c7855e-fbe3-48c5-a5c0-d130bbaf85f1", "value": "1536:v3jN08yCL2q2dFNJf6/YSzjkRHELtOKOJa10elr:v3jN0xzazohEpLO4Flr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708246914, "uuid": "b2a15ddf-9ca5-4beb-a4f0-d98052b2e1bd", "value": 59924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708246914, "uuid": "d302f2a5-398f-42bd-8235-b170911823af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246914, "uuid": "48b2dac5-ff04-496c-a0e7-79116521876f", "value": "984657006436d4ba8ec04a61ced46045", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52ed8151-ce56-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708258064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258064, "uuid": "ee0d1aca-f2de-43d6-80a8-33ec34aa7acb", "comment": "Malware payload (Mirai)", "value": "91b79915b9f801c597778f8c45191394", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258064, "uuid": "f9f4cb6b-f006-4ebd-961f-4d4bfd3cef3d", "comment": "Malware payload (Mirai)", "value": "711f6b4973b8168b0021ddec3ce58876366bec38c8b32d0ce6c592595e7262c9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258064, "uuid": "19163732-1edb-4aac-a08a-bd821c316fb0", "comment": "Malware payload (Mirai)", "value": "6e2189278354c9722f6bcdba52b6fe277519e2bc", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258064, "uuid": "4507fa9b-0da5-45c8-ba2c-625020c6ad82", "comment": "Malware payload (Mirai)", "value": "90331f57d0f87facd9359b1918afef7e7b30fbcc8ddbf3e52d7445956544c34d0ff90b849da1ae570162c380a282610c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258064, "uuid": "c2e80477-4b5c-4be5-9d76-d2735769f709", "value": "T163433A85B8829A22C4D112BBF66E558C372927E8E3DF32079D212F6177C681F0E77E45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258064, "uuid": "3d575334-91f3-45c5-b8cd-a25f2af729bc", "value": "768:4AUwgH2VNP2k2ljKKPGV3/tXYgbut2pYPnSuT2U2ntuhJG8EjaP7QQtYh26hIhVT:8w3NPT2ljNW/tol2pwRzdzGEn6a10ho", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708258064, "uuid": "42a3edfb-8994-49f1-9afc-a2abe6b04741", "value": 56796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708258064, "uuid": "482cb19b-58f3-4c97-b750-8de8dbbe15c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258064, "uuid": "e1f21c21-0f4f-4a61-9655-9848016ee000", "value": "91b79915b9f801c597778f8c45191394", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfe23f5c-ce39-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Smoke Loader)", "timestamp": 1708245819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245819, "uuid": "53493156-35bb-4828-bb2e-c9ce42076fa8", "comment": "Malware payload (Smoke Loader)", "value": "0c7550f273a318b218475c0f47b62dff", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245819, "uuid": "ab222347-bbcf-4e07-86c5-270b85cba534", "comment": "Malware payload (Smoke Loader)", "value": "719d2a9cca051c4489b4374f74efb0e8dad90b6eb8eef353ea500252bbc50305", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245819, "uuid": "22294d66-750e-4287-8dd0-a013fc0cfbec", "comment": "Malware payload (Smoke Loader)", "value": "053abf8c97c4874f16eb191cf21f087708491c93", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245819, "uuid": "461a6a5e-e08b-4589-bfb7-4eb91fd460a0", "comment": "Malware payload (Smoke Loader)", "value": "e9c33953663bfd8b8baeb8e4c73ec27a1093e50f9df71f383e110b40b3ca9fef94e0083150f382930735ece6942b0546", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245819, "uuid": "41d66d3e-804c-407a-8414-d9ef8293b629", "value": "T16C34BE21B690C072C8AB04368874CAF86D7ABDAA9B7481CB77583FAF3D312D15335356", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245819, "uuid": "1dbcacdf-4f27-46e2-b9b5-03cfec631319", "value": "34c4161f659e591de8a4c6e215c7a951", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245819, "uuid": "bfcec5b3-0c75-4344-9b3f-c4c7b1dfc1a3", "value": "3072:yN8RBEl4d6Q4MCPfQ+qTE0O0cQhnjdc94OHwhj6Kxo51Xd278s:6lFMUm40Mknhc9z2jKXd27", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708245819, "uuid": "d6a506c8-d1a5-4054-a9bc-a8dd489d8357", "value": 241152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708245819, "uuid": "f1ed1ac2-c1a2-4fba-b79b-fe90a49eaa52", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245819, "uuid": "5758a8d6-1955-463c-bef9-9d2c95317820", "value": "0c7550f273a318b218475c0f47b62dff.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "733353aa-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292049, "uuid": "ca9a2c9e-0a42-4899-b05c-b45d0978de56", "comment": "Malware payload", "value": "640a9f199631cadc37d85caa795b3393", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292049, "uuid": "1e78491d-c18c-4d1f-9399-2826ecff0336", "comment": "Malware payload", "value": "73109fe6d89876d8464f39767d9f12edcf3fbdcf52e5eb977d6b582b1ec49a6c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292049, "uuid": "70ad5f78-bd2f-4477-8c15-60f0eb3a0c6c", "comment": "Malware payload", "value": "ec64a02a353ed432c77c3e54765c5db055e5c8ed", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292049, "uuid": "ad61bf37-7c3b-4685-93ed-78bfc40cd82a", "comment": "Malware payload", "value": "f2177fe7999a466004c11931b68b5bbd225783fb1f6e76238c8b42f2a70f59d02e22ced9aab7a6cb08292fc25d473b68", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292049, "uuid": "af6c52b0-ff8c-4418-9d1f-7d4fd3c75c19", "value": "T1A1D64A30C250EB12F2B391B55529974978186B640B2C55E709E4FCE83BF81D2EABDD3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292049, "uuid": "c2a00fcb-8883-431e-8b49-1ec8f08d0d49", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292049, "uuid": "94ee5350-58b8-46e8-8dab-a3bfa5dd75e2", "value": "49152:atVplF5UZz/h5kVXQ6iIBiRvYhPD6CS63Og7ttXp22Zp22X222Hp2222ppBUuVki:atPb5qvkVX1iIwAhL6CS9av8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292049, "uuid": "0db0ed4e-a822-45aa-b4ef-76f032958e1f", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292049, "uuid": "1b779d0e-c0ed-4f84-89fc-42d62cb95042", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292049, "uuid": "f602f484-df4f-4546-ba95-5fb89ccccff8", "value": "SecuriteInfo.com.Win32.BankerX-gen.8489.1406", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a84b9ef-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292034, "uuid": "59f86d1a-1395-415b-a167-6b57e143406c", "comment": "Malware payload", "value": "81331e25ce9532b3a744c4f9de9a760a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292034, "uuid": "e3d96a1c-9100-465e-961c-ac364f965e74", "comment": "Malware payload", "value": "735166517e6c17fc46ff55ac225513176d232ab785b8d559a0bfb66116356ab1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292034, "uuid": "0486f446-f48f-4701-b467-bb89454bf321", "comment": "Malware payload", "value": "4d9c6dc55d775902f5a1ae313bebaf3f2731fa84", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292034, "uuid": "3bb62559-d8c5-4053-8b19-e5301a63cbd2", "comment": "Malware payload", "value": "aec0163fc329450b90532892c7d0d7921404eb3adabd5f270911904dbc7707f51b67db967de056e1b79ee9befac20382", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292034, "uuid": "54c79445-2283-4f1a-aca6-5c048f7f2020", "value": "T189D64A30C250EB12F2B391B55529974978186B640B2C55E709E4FCE83BF81D2EABDD3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292034, "uuid": "34a3dd0d-73b0-4c23-ba30-83ca9f94a846", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292034, "uuid": "63027bba-c394-42f1-8dc3-f51ea3b15d3f", "value": "49152:atVplF5UZz/h5kVXQ6iIBiRvYhPD6CS63Og7ttXp22Zp22X222Hp2222ppBUuVk6:atPb5qvkVX1iIwAhL6CS2av1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292034, "uuid": "4160c267-57a6-4b5c-b997-d0f10b40e7ef", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292034, "uuid": "fc464593-ebc3-4ce7-a750-59fedca8daf2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292034, "uuid": "138521cc-3827-4d61-a0bb-0ef3dc4ae7c9", "value": "SecuriteInfo.com.Win32.BankerX-gen.11383.7210", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73318344-ceb8-11ee-b7ea-42010a9c0006", "comment": "Malware payload (DCRat)", "timestamp": 1708300209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708300209, "uuid": "03910ac7-9357-477d-8977-ebcee1bf238d", "comment": "Malware payload (DCRat)", "value": "3c2a5cc48477ccf3ba2096a896abcf95", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708300209, "uuid": "30e13d3d-9c10-4821-bc5a-526f7f725cc6", "comment": "Malware payload (DCRat)", "value": "738f3b29b73ecee8cb2f1439bfb37f537b00fea55329de4d5a9eb556f5124898", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708300209, "uuid": "31c17e60-1c27-4c20-a769-a42986f126a7", "comment": "Malware payload (DCRat)", "value": "0b7dd50ed94b05df4c2b832ea5e0e49c099474cd", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708300209, "uuid": "734f8d17-0f86-4485-bb4b-3e3ba610be2e", "comment": "Malware payload (DCRat)", "value": "34a390f418701672d0f6336f4e398de27bcded180047bf0e56002a8f771e710bb8020e0164ab25e49d0603613be6bf7a", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708300209, "uuid": "d8711bf3-10f1-4961-a14e-8166919c9f3c", "value": "T10BF5E0017E448E12E0491233D3EF454887B1E9516AEAE72B7CFA377E15523A33C5DACA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708300209, "uuid": "da9ad443-da9f-4878-9a85-3fc0fe48dc8b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708300209, "uuid": "ef5fd5cf-addd-44e4-9703-ff9d05cb1282", "value": "98304:Cs9b57LSoQFlXZygbmhFZdhVneeUdo8Ac:Zl72rvXZchhDUa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708300209, "uuid": "8e5f67f9-bd41-4836-80a6-46166963b9ff", "value": 3498496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708300209, "uuid": "f5b8d63d-a225-4d81-8515-8d9788f1387c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708300209, "uuid": "a452a278-c2cc-4245-8a5e-f6be447f2a24", "value": "3c2a5cc48477ccf3ba2096a896abcf95.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b24ccde-ce2f-11ee-b7ea-42010a9c0006", "comment": "Malware payload (LummaStealer)", "timestamp": 1708241220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708241220, "uuid": "4b39a37b-c4d8-4122-9750-4a753e074ce7", "comment": "Malware payload (LummaStealer)", "value": "3d2102744af006b6d013dc645556f3ea", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708241220, "uuid": "0fb0f89a-e0a9-4f88-8bbc-4272982a71b8", "comment": "Malware payload (LummaStealer)", "value": "739de0861d39110a6c10d8acbf153242c850e26f79189c34ffcd2d3c6ae51bbb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708241220, "uuid": "08fb4cfa-35ae-44e6-b33e-752394273504", "comment": "Malware payload (LummaStealer)", "value": "186da16a6db0329816022d803cd8081a8117cd34", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708241220, "uuid": "bc3f9bd5-eca4-41d9-a5b6-42a0cb40fb32", "comment": "Malware payload (LummaStealer)", "value": "565c79e0241f15250bb2d42a1cddfdca8fb413e651bc9866d61e52f351820917c75e2effea785344c9dee0905e268337", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708241220, "uuid": "010c547e-4045-4e8a-b508-66587c330577", "value": "T17B952311B6C0C0B7C8F78A3264E4CA3A4E6032A65B6A96C773DE17392F153D89B751DC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708241220, "uuid": "be1032ef-96e4-45bb-850e-cd3c26d1814d", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708241220, "uuid": "9da6be3e-5a87-46f4-9c22-059a8ef57fd3", "value": "49152:9kQTAW+gLhrLZcliEYxjGVge/oA9gYpg2PpBKq74mu9NRZ:9a3wLpxtUp9zZyl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708241220, "uuid": "840822f0-7a8f-4acd-b3f6-543020208885", "value": 2051720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708241220, "uuid": "fe3bd997-3695-4b17-a440-7d78e4ba5763", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708241220, "uuid": "3fd1e332-0654-4f03-b94d-b1008e2788db", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d36f4b5f-ce4c-11ee-b7ea-42010a9c0006", "comment": "Malware payload (DCRat)", "timestamp": 1708253985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253985, "uuid": "f664798a-7203-4bc2-a3e1-a521a5c5c75b", "comment": "Malware payload (DCRat)", "value": "304d41baaa716a6d582877785f93ef68", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253985, "uuid": "2b4874b1-2486-40cf-a118-6a07ba8faedc", "comment": "Malware payload (DCRat)", "value": "760d61c1b76f9a909e2e427ed60c7cc76ebb32246b8aec5459d882a04482b1ea", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253985, "uuid": "19a8f19e-f653-4ff7-bd0e-eaa213301680", "comment": "Malware payload (DCRat)", "value": "a2b16217d6326c54fbd7ca5586519d50ce3e20ca", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253985, "uuid": "11c458e7-136f-4765-8cf4-fb51808a146f", "comment": "Malware payload (DCRat)", "value": "6b8619f9187364c8658b4aec87d632f17969a0091cb33039df91aac288bd283a1a13a25d7e624bac2f60b55d4f9b4543", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253985, "uuid": "6693b9e8-5fd9-40b8-8e4c-1609cf6b6ecb", "value": "T1F8235C4037D8C136E2BD4BB4ADF2A2458675D26B2903D69D2CC814AB1F13FC59603AFE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253985, "uuid": "94de2548-720e-457e-9eae-95a83b4dec84", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253985, "uuid": "c065b064-e0c6-46e3-accf-9f6b6f967b65", "value": "768:59n7mxUzILWCaS+Di1xCKzVixM8YbxgeXP9RavEgK/JXZVc6KN:597AKW1xCGLzb+SPTankJXZVclN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708253985, "uuid": "30114bc8-4672-4297-8ffd-022cc86ee098", "value": 48640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708253985, "uuid": "2ef91c2e-e054-4224-b7cd-6b5c9de5c66e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253985, "uuid": "b1923246-2b4f-4649-9c04-ac8589a9c947", "value": "Client.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b9775b1-ce08-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708224605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224605, "uuid": "f533e258-1931-49fe-b317-dbd86d25dac0", "comment": "Malware payload (Mirai)", "value": "bbdbd82f6900677a27e5ab83da023110", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224605, "uuid": "ce9432ad-5d6a-45cd-99db-332364a7d509", "comment": "Malware payload (Mirai)", "value": "76375087d5ff0249bb958e997835a0eac1274344981c335b00439cb01e960003", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224605, "uuid": "f90a8eeb-78f2-4502-b947-173bf18a8166", "comment": "Malware payload (Mirai)", "value": "5a6d5058c5ac57ff0abc98fce9a1e4d3eda33cd4", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224605, "uuid": "241d0276-786c-4aa2-bfdf-f9358127993f", "comment": "Malware payload (Mirai)", "value": "19c8d2895d9744fac85ea6c0eb2aeafcb15dca39ab104b2d6c7b9e1582afe2e8eda5b5c063ae6fbff182317135c92f07", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708224605, "uuid": "1a46985f-4ef7-440c-a7be-ad10c6077a4e", "value": "T14BC2D0FD79FADD3BCA1112735895CC1342C2ED0387379A13F684E019A11BBA276A1C8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708224605, "uuid": "9a38dd8c-79e9-4833-8b4f-815a6a33b0c3", "value": "384:Mw1DMw3pzuwvz3g8vipyoimW4i7M6yrr575GH7ooTdh3rtciaWEHnHzeWNy0Ny:BMwZSYzHEi7Nyp7kMcL6dTq0Ny", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708224605, "uuid": "6edfe7b1-17a6-4fc1-8746-d3dce70453c9", "value": 28048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708224605, "uuid": "244b2e9f-3640-4685-91ab-85909daffd4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708224605, "uuid": "11513fcf-47c5-4108-9d44-8bfbe9bcd071", "value": "sora.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ac71847-ce85-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708278237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278237, "uuid": "0509ed37-b378-42e0-972a-393cb3852dd3", "comment": "Malware payload", "value": "88c8c6d13d6c39eeaeae0c4935f51f9b", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278237, "uuid": "b5935338-9967-4390-9797-83f307b58cf0", "comment": "Malware payload", "value": "7671d497afc640a02773aa75316162c260719288e8de88a3042a6e13b59eb2a6", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278237, "uuid": "7e3e7d4e-6c90-4ff7-8d66-64294b55e82c", "comment": "Malware payload", "value": "16bb64028541d855da02eb85fe3d5f971e13d906", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278237, "uuid": "aeea2d59-da39-432b-9e8e-16e80dea56b7", "comment": "Malware payload", "value": "078442ea5461045d010bbc95ae91b61dbd9ecb5a217bce4428d9333c08f078289e02bd86a99bc35aefa0de9a9a9ad31a", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278237, "uuid": "08b1a5bd-ae30-4d40-86d5-24720e0fe24f", "value": "T1F6156A42B7F89B27C09D5277E0BA062507F0E506A29BF74B2D65D6B86EC37A44D003E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278237, "uuid": "e9605979-6888-4dbc-bcbe-27c68a922402", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278237, "uuid": "4f2386d3-5dd2-40ae-bd18-c6a0a106f74a", "value": "12288:+ePzA5Qa0p+bULtqHoMF/8+wtZwBrLPnWn:BPbsY4IMgtuBrq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278237, "uuid": "3bc144dd-6c4c-47cc-b267-4923e75d76e6", "value": 949248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278237, "uuid": "812f0fbf-27d9-4d42-8d1e-a4418f17b743", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278237, "uuid": "086f8498-124c-4751-beb4-3d44e3095264", "value": "InfiniteCompany.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d954f961-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249700, "uuid": "3d56c036-1cc2-4c37-8bd7-584ec67a4a2c", "comment": "Malware payload (Mirai)", "value": "1fd6849196f3c19e80fc26bf44873588", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249700, "uuid": "3885b5eb-c9ea-4e5d-814d-f3c85232f3e5", "comment": "Malware payload (Mirai)", "value": "778cc0127e005ff34a0897f5072333b58ec3682673b3a7d2b81dcb9e4cd043a2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249700, "uuid": "24775bc5-58e2-4e8e-8a53-86b366100176", "comment": "Malware payload (Mirai)", "value": "51b04e066104bf7c47a2b943018782417542e7a0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249700, "uuid": "0af5d4bf-0745-4ef7-8c9c-484a92218bc5", "comment": "Malware payload (Mirai)", "value": "b26b38347207f17abb1b65af015348ad51467ef4c268511b1e3b71d0993b150405ad542645eaa5c0357c05048bfa3218", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249700, "uuid": "edb94fd6-2ee9-4f67-8749-22bea6504b0f", "value": "T11704885E6E228F7DF668873447B78E25976823DA27E1D644E1ACC1101F2039E641FFE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249700, "uuid": "6fecd01d-8f7d-46f7-9f91-d86e47ddaf47", "value": "1536:yl2JvnXPwLoQ+chMJdDNsCK9HFP18tOQGgezLiM+C27TfF+h/iuf/P/zfd/o:ygv/PcwZsCK9ltSOQ+LidFS/v/PbfVo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249700, "uuid": "bc17db58-7b6e-4e82-855a-07ef0b256d47", "value": 173796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249700, "uuid": "22cac9c6-8ae3-4aab-890d-d0c271474685", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249700, "uuid": "3b5f65e1-5749-4609-be5e-7d38a6f137a7", "value": "1fd6849196f3c19e80fc26bf44873588", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c5162e7-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292064, "uuid": "fa61e1c6-d977-4300-9564-3677a9a571d4", "comment": "Malware payload", "value": "b8532d5a0a01456b7d0b6ea1c69baa15", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292064, "uuid": "21bfad0d-7b53-4380-b987-c7a578c3e1cb", "comment": "Malware payload", "value": "7d77da01d99758588905be590532772cc6a5be647d9da2dd5e6a5070913fa38f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292064, "uuid": "dfb04fda-0645-44e5-b585-a59fce9b4669", "comment": "Malware payload", "value": "e0cc0f80b2effc210a16eb1058d81a1d095e753e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292064, "uuid": "5a374220-1a21-4a5f-afd9-ce1d433110e1", "comment": "Malware payload", "value": "dc400029c6c3d60e09592ee6e17e45371246ce238f9378c9ba54722e4e09955322e61bbb62b6023c4d88fa5b5d2358cd", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292064, "uuid": "17be4b23-0066-487d-8fac-604e9b2facd9", "value": "T13DD64A30C250EB12F2B391B55529974978186B640B2C55E709E4FCE83BF81D2EABDD3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292064, "uuid": "10021a8f-5932-48f7-9341-28527fe55a61", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292064, "uuid": "e03610af-01ba-4522-9046-b8535c0c1747", "value": "49152:atVplF5UZz/h5kVXQ6iIBiRvYhPD6CS63Og7ttXp22Zp22X222Hp2222ppBUuVkh:atPb5qvkVX1iIwAhL6CSyavs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292064, "uuid": "3849612f-1c9c-40f3-b818-90b0a1449273", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292064, "uuid": "b8bd5305-2fdb-414c-b010-95c9e1b43b4a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292064, "uuid": "a7b12b4d-67d1-4616-be69-d780ce8916ab", "value": "SecuriteInfo.com.Win32.BankerX-gen.27275.16990", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b81962d6-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249644, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249644, "uuid": "a7a22732-998d-4910-a8e5-f0ba43d57d45", "comment": "Malware payload (Mirai)", "value": "4225ce17db85afec4ebc886dc8b1a840", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249644, "uuid": "f06103f6-6f67-4887-b954-6437662ab4f1", "comment": "Malware payload (Mirai)", "value": "7ebb245636034b5eb44d9dba9bdb72abf173b4cd9e3dac4964ece7b74da7cf8a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249644, "uuid": "3193bd14-72eb-444c-8568-c6f74709b0d8", "comment": "Malware payload (Mirai)", "value": "078b911ae8cb67ff2f10686c034dfdba096d694c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249644, "uuid": "74aef1b0-e268-4caf-89aa-2b11a128bae6", "comment": "Malware payload (Mirai)", "value": "94fc99c2d429c5f0ef2a5001053f3b07875272f09029fe3a6972cd7610d3edbca6dc9808fa79b784ea3c73c0f520d966", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249644, "uuid": "0bfba133-b054-4e35-83e5-6fe99e43ea8e", "value": "T1D0E329D7F800DEFAF80AE33748530905B630B7E245925B372257797BED3A1991863E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249644, "uuid": "82eee961-923e-48f6-8f9a-090701e8ec4f", "value": "3072:GuRsZsz04+TWPtiGhwjAnW8lEJVrjbiPLbxkYRyYkMfy:fsfIvhoA5lEkLbxJyYnfy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249644, "uuid": "9314d92b-b5e0-43a5-bd9c-c1b865a9bcca", "value": 150496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249644, "uuid": "fcaa4da1-91c0-453c-b83b-f9c7775a466e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249644, "uuid": "7c1c6b0b-18cc-4a86-89cf-799ccb778e0e", "value": "4225ce17db85afec4ebc886dc8b1a840", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0d90375-ceac-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708295212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295212, "uuid": "9beb1be6-33b3-410b-9a46-14ace705029f", "comment": "Malware payload (Mirai)", "value": "8a28ab6e0debbb60487dbf48c980dace", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295212, "uuid": "22549d57-b17b-422d-9b71-f2aa58627582", "comment": "Malware payload (Mirai)", "value": "7f550bd4cd96d52f4966d9ecc3bd35dad16196fb1e170968f6f763a89e7ffd08", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295212, "uuid": "0ce7fc27-fb05-439c-963f-424a845b788e", "comment": "Malware payload (Mirai)", "value": "4a28b4eb9dee1f619ffc5ded955c97e4557709d8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295212, "uuid": "9f687276-3f19-480e-9c44-6bb323ed6e76", "comment": "Malware payload (Mirai)", "value": "171127d831dfbc564221d7713b9595e1aa01944107ec373ba96a326668d0fee705a5dc84fd5217cd9a286b27c49cb269", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295212, "uuid": "e1f68c5b-31d1-4691-8dbe-1377c97d195c", "value": "T1AF73E952BD819F03C5C222F6F7EF01893B157B68D6EB3242E925BF9033868DB1967611", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295212, "uuid": "139ae02c-0144-481f-9afa-32fa6e94a989", "value": "1536:+vrt8Z7xAY3CPb2IaSZHKJKXp92dFj38KugxAKcbvC/:+DCZ7xAES5lOj3agAtC/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708295212, "uuid": "cb072e1a-a20e-4ce7-bc01-ca335198edaf", "value": 74848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708295212, "uuid": "4e364c72-79c7-4d44-8453-e8db52b11f3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295212, "uuid": "25dd7523-6942-40bd-8b26-7a34729732ba", "value": "8a28ab6e0debbb60487dbf48c980dace", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fa93a32-ce82-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708276984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708276984, "uuid": "f2a925de-7ba8-417a-bd65-f47db78baa43", "comment": "Malware payload", "value": "c25b49da1f92e468a77a9d99e4e9a317", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708276984, "uuid": "15059ca6-1118-40d2-9ac8-212d8641cece", "comment": "Malware payload", "value": "7f6bc79dcdf6434753a273ecb3f653445028b17858b5d84bb5f16687a37e9545", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708276984, "uuid": "4bfadf14-bcce-465e-b2f1-e6665abb0ca3", "comment": "Malware payload", "value": "d4e50f3f21441bb0f186a7cd2f80f81225328ec8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708276984, "uuid": "795af92a-a435-43c6-98bb-570c76359085", "comment": "Malware payload", "value": "d47950ffca1d041434f7661f610c8bb3901b91dfd42cba0d2a5976d0599fab78df5c7b7d009703b6576d56284883561e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708276984, "uuid": "0d90b128-cf45-471a-8996-73b3467f2b80", "value": "T142273373B6D11281C4BA0FBF0F87FCD04C547EBCB5A250551BEA1026DAB1AA855B0EF6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708276984, "uuid": "9afc3fa5-0c14-4e47-828d-28e905e9c886", "value": "c05041e01f84e1ccca9c4451f3b6a383", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708276984, "uuid": "aa267531-c691-4633-bdbb-77791ae4a20f", "value": "393216:punw6VpgyukqUrRB78L3XfpVlo0S26sQmEx9c0d3t4j1Ses8ND4E1CNrmjexQuhI:puw6VSLS87DlwrVc0Nt4jMesK4pQIlhI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708276984, "uuid": "1b87e396-f92b-4dad-816f-ed58d4926ff3", "value": 21975520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708276984, "uuid": "c0e5b64b-f385-4af9-bde7-67dae199e537", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708276984, "uuid": "1ae80217-6576-4c4d-af83-7bcd7fc5aef8", "value": "SecuriteInfo.com.Riskware.HRS.26124.12208", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d21edc5-ce0d-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1708226809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708226809, "uuid": "ea07f491-d0b4-45c0-9823-45203a8122e2", "comment": "Malware payload (RiseProStealer)", "value": "9679360eba4f604765dfe5cd52df75ca", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708226809, "uuid": "57d5bca2-39da-4464-a0c4-b5d136b32503", "comment": "Malware payload (RiseProStealer)", "value": "7f8c9b09b9f800100852f7585fae2f29c9b767b2c57125e58c3840fa6c174740", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708226809, "uuid": "8874e137-87f4-41ea-8d8d-5a777f3e7d7c", "comment": "Malware payload (RiseProStealer)", "value": "83c8e38b55ba509086d9b86317dcc316c841e390", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708226809, "uuid": "94cf2ddf-3c46-41b6-8a3a-6791030f888d", "comment": "Malware payload (RiseProStealer)", "value": "6c7717e44423be78a0349f3a9eb476bf931d813c7941166a54ae515e3c55c387399ab89ad2febf78870793a5c9dd7371", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708226809, "uuid": "4a6d94c4-31a5-4145-96c8-396a065e2cd3", "value": "T1C41512CEBD80806BDAD8777404C1FB78022EED95B98540D96CE8BFA77A33D24192756C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708226809, "uuid": "4a2c1964-4428-41a3-a3fb-c88d79ce26a3", "value": "2388fee6ad8ce4f4a35dbaf64e2da01a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708226809, "uuid": "4167ef0f-63bb-4795-96fa-66290509d901", "value": "12288:d4ZoaQMCxTogTHbvV0fozdD2Dsc33yZwnbcqR9Pz5yEuWZJhq:d4Zo5H31c330wA29P3ZJhq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708226809, "uuid": "15534ade-69dc-4298-9fed-37fcc1deec01", "value": 921872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708226809, "uuid": "57eaed39-9448-4c47-ae59-afd686de0bc6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708226809, "uuid": "e270b6ad-3ead-4089-876b-5687b7bdc63f", "value": "SecuriteInfo.com.Variant.Ser.Zusy.4878.18518.2249", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cba95afe-ce8c-11ee-b7ea-42010a9c0006", "comment": "Malware payload (CoinMiner)", "timestamp": 1708281460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708281460, "uuid": "11c12c2b-5445-4454-b1cd-727b6c335198", "comment": "Malware payload (CoinMiner)", "value": "7e78c4388e398cd5113be95855753c9a", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708281460, "uuid": "a8daa8a7-7125-48ff-9e83-c278bf0865cf", "comment": "Malware payload (CoinMiner)", "value": "7fdcf0389689ae53b0ee7a302dc69963e7f5b3ce911b772792689b05d7f02f67", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708281460, "uuid": "8c90e221-8a82-4a35-abd8-316a678fd385", "comment": "Malware payload (CoinMiner)", "value": "ed6abdccf206689d48cc1adac47a3a71b100d822", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708281460, "uuid": "4baf227a-7e18-4158-86d3-5c7c698e15a3", "comment": "Malware payload (CoinMiner)", "value": "260f68e254e646ed5f63766c170451937d49fee15a70fad146051e0f954e75d03ff28035ba7d3eace11044c95e1e177d", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708281460, "uuid": "e29f717d-058a-4010-8ebd-629647e6cfd8", "value": "T15946E037C6712C9CF27E077AB9C4931446E3F6F543A7FB0F22A498669428B867E1914C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708281460, "uuid": "c397fbc4-cdf7-4e17-b5d6-abfe505b4edb", "value": "f7505c167603909b7180406402fef19e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708281460, "uuid": "67405b7b-ba88-457f-88e7-f0411d766569", "value": "98304:jtFdnoyNMWDUWe4HVEceiM9N7/FErSxMC504f+18:j7+yKIU6VEceiSp/mSxL5JB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708281460, "uuid": "c4ef8c5f-b7af-43de-8322-27eebf07f244", "value": 5827072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708281460, "uuid": "82fe980e-4aa1-48b6-b19f-6e701fa0cc3c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708281460, "uuid": "7f35d537-c90a-4369-b197-b6ba55450eb9", "value": "SecuriteInfo.com.Win64.Evo-gen.32403.24162", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "469b3bcf-ce56-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708258044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258044, "uuid": "fd3b07c6-6fca-49ef-bd7a-e3d85b113d37", "comment": "Malware payload (Mirai)", "value": "9f85095522dc9b6aa37d80283087a0b2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258044, "uuid": "b5ef2095-3eb9-4003-a7de-82f56d5e13c6", "comment": "Malware payload (Mirai)", "value": "84c1b4d7ef7cc5de2928a7c7a577ada8b2760536d30da16c69b402fe9602f095", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258044, "uuid": "877eb2ba-1d1b-4401-aa15-a5cd80caccae", "comment": "Malware payload (Mirai)", "value": "80367e927b2fa4d1feb0071f5af362fae774a916", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258044, "uuid": "f18f98c8-d0a1-4ea2-9770-8b543f21d023", "comment": "Malware payload (Mirai)", "value": "6052c9b0b3b504f87e7cb79547bb8b7fb69d3579b96c78b44759ca360dc7897b311f87dbfd55714be1cba681572e39d8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258044, "uuid": "695615d2-93df-46cd-9e54-c9911d11e0b3", "value": "T1B7132A42B31C0547E1A21FB03E3F57E0D3EAAE9221A4F288791FAB498571E335645E9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258044, "uuid": "91a38a97-8326-4e3d-92a2-40cefeb64612", "value": "768:btXVVNlcibfDfG4yki08nXaS90KqoVOmEI5kMEj16/cCISMrGo9ZL:bpcGD5yMS909qEI+M68cCVMao9N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708258044, "uuid": "6e8d7891-78ac-497a-9c1a-76191b98f1bd", "value": 44112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708258044, "uuid": "ae16c69c-cdf5-4d80-942d-b435e4c0c691", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258044, "uuid": "e969b9da-3248-41f4-a1f2-f71ecbde74a4", "value": "9f85095522dc9b6aa37d80283087a0b2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3c37f64-ceac-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708295217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295217, "uuid": "01f225a5-959f-47f5-9527-234e5321d4b9", "comment": "Malware payload (Mirai)", "value": "007aecf4beaf3f924ab519afb2961b34", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295217, "uuid": "093ed0dd-b104-4786-aa26-ae993708c0f0", "comment": "Malware payload (Mirai)", "value": "85f403b8751e25e205c7ed97ed54e8990d86af10c0792ada25a34dc46a397942", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295217, "uuid": "d153d9ba-f61d-4661-a4b5-fd612fe8ef5d", "comment": "Malware payload (Mirai)", "value": "66ec27b0f44569f739250999789b1e8624e0b77f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295217, "uuid": "f0cbb98e-117c-48eb-a625-904299854a45", "comment": "Malware payload (Mirai)", "value": "605b43730ca522dd1a590045ade378e17520c1707f5ad2a610bc171d2c3cf42c06f50118ab61d9edc5f772947fb8b819", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295217, "uuid": "2adfeecb-4143-4d30-9a09-54879889e46e", "value": "T1E263E781BA47CAF6D41744B041E7B63F8A31FD2A0872C6ADEF25FEA5DB135C16205368", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295217, "uuid": "aa662fcf-c3a6-4084-a2a5-5b38207ab7f9", "value": "1536:Ro+6m5NblJsDIq4iDJpm6nYTc4AuZWrwkv6iPVPzjCtU9:TpblJlq4iDJpoXY8kv6iPVbWa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708295217, "uuid": "7e5e998c-d5c8-431b-ae37-2aec9f51809c", "value": 70372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708295217, "uuid": "b45ff510-1b9f-4dd9-a53b-1bd7cafdf6cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295217, "uuid": "33333383-82a7-407a-b4e8-fa9b06277b94", "value": "007aecf4beaf3f924ab519afb2961b34", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e0b230e-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292067, "uuid": "fc4ffba2-1bda-46f4-8953-f9e304bd8be4", "comment": "Malware payload", "value": "5384a1811b264bdef3a018e2322a163b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292067, "uuid": "d2e8b6ca-f22f-4b9c-ac67-f6fb5a780678", "comment": "Malware payload", "value": "89f82b260c27d3ae83fffd5a753fbf527158c8437f29056f57b1c5f8a2dfd649", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292067, "uuid": "ddb4fc8d-330a-4a30-b644-1ac6f1d06fe4", "comment": "Malware payload", "value": "aabfcb7db435d998ee0465d8885bd0cfbff4dd4c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292067, "uuid": "a2fbb9a2-bde9-4c06-b698-32a214766e4e", "comment": "Malware payload", "value": "99d46f30d86d0a515ce897a2d2e88768441fb03a8ca4c6bdba15b891dec2cb9dcf776c1a8a41448f0cb0abe33777134c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292067, "uuid": "2ca54ffb-7632-49b9-9c46-f29f1d74a3ae", "value": "T169D64A30C250EB12F2B391B55529974978186B640B2C55E709E4FCE83BF81D2EABDD3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292067, "uuid": "aab26c20-d8bf-4d73-b1c7-3a9fe1c0534a", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292067, "uuid": "61dc9604-6560-4b95-979c-96c0358fce7c", "value": "49152:atVplF5UZz/h5kVXQ6iIBiRvYhPD6CS63Og7ttXp22Zp22X222Hp2222ppBUuVkz:atPb5qvkVX1iIwAhL6CScavs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292067, "uuid": "70aeb579-dc21-4f66-b35c-20ca0b02dad7", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292067, "uuid": "ae30e3cf-3abb-4b08-8e4e-680258768466", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292067, "uuid": "94329544-8419-4692-94fc-1bb52d5408e8", "value": "SecuriteInfo.com.Win32.BankerX-gen.28499.3938", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "500305d6-ce06-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708223700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223700, "uuid": "eecf10aa-ba59-4be5-a1cf-2ceb8a0c69b6", "comment": "Malware payload (Mirai)", "value": "a264b846f70b57dd529f60233dfd4914", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223700, "uuid": "7fc3ae58-d002-47a6-8415-945e39482cfe", "comment": "Malware payload (Mirai)", "value": "8a22e4fe1f2225f237170157d36314d32070c8c7bb1593af9fb21f4adc9929f7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223700, "uuid": "606eb882-a079-42ed-be12-5964a5d9d359", "comment": "Malware payload (Mirai)", "value": "f66caf8f71f9bcf4ecc9eb6ab0df3569be46f65d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708223700, "uuid": "2039ba15-5a12-4027-ada8-c64836840c71", "comment": "Malware payload (Mirai)", "value": "a1678af6696a8a6ff92813de4815166a76dcdcfc1c40ed96f4b2e1960fcea909316e0213f36bf8404ad6eca83d2da0c3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708223700, "uuid": "718539cc-0728-4486-857d-a85939d99975", "value": "T11FC2D001A5C31F35E2A18D3289D9CE4A735F4FB4C2B633B22B5D06D8774316A2BB9991", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708223700, "uuid": "d79c8b31-5486-4461-8bed-fda4e99a95f5", "value": "768:0jkhC2qhEjO79dkNOgsawPE5p9wFYs3UozR:0fEjO7zkNOgsa35CzR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708223700, "uuid": "a745e8df-ff78-4772-9c68-76f5b6fac7d4", "value": 28160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708223700, "uuid": "fbf68226-a9c7-47d0-bbf5-d6f123d2ed29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708223700, "uuid": "91dae8fb-7145-4926-aa5b-f8828a665a25", "value": "a264b846f70b57dd529f60233dfd4914", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be787ea4-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249655, "uuid": "01e5bc17-a58b-4899-a6d8-5551df0fbfb1", "comment": "Malware payload (Mirai)", "value": "03bb4489f4c9784dd88139838c1a36e7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249655, "uuid": "2d7e42e2-99f0-4a66-a9fe-5c12568fd4bb", "comment": "Malware payload (Mirai)", "value": "8ddfa4fb225bb44d5b9beb0ac7902736368d55995331505ee06112e01bc43f02", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249655, "uuid": "7711865a-5321-42d6-a873-b992000be35a", "comment": "Malware payload (Mirai)", "value": "a8bd8da884c050720bed5b505d0d22f9813d221c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249655, "uuid": "9f5f684b-8210-40eb-9cce-484da4818e09", "comment": "Malware payload (Mirai)", "value": "8b55aae47396432346438f534f0051b3d5698edf9dd731cf9f094260ec9aced9a8924fcfa7c12b70a264f74f2f425cc1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249655, "uuid": "be4172c8-870f-4011-ab46-e6222b2837ab", "value": "T188C30945FC415B27C6C212B7FB5E428D3B2A17A8D3EE72039D216F61378B95B0E36542", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249655, "uuid": "d196566b-df1f-4c69-bbc1-d43308f16367", "value": "1536:JSDwI4fG50nVg/ZXER9+19jAd424V8G2TTZxhLNqLbqt1budpLSlcCwyw6FPRblt:0DwLYhZXy019jc4r2/ZxhZqQbu34ebo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249655, "uuid": "590a562f-ab49-44f9-9ad4-3acb03599edb", "value": 129792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249655, "uuid": "a4ab5559-025c-4b09-bb05-fba0c75a06d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249655, "uuid": "79977acb-093e-4653-9078-8a7798fa4ab2", "value": "03bb4489f4c9784dd88139838c1a36e7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8318e531-ce49-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708252562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708252562, "uuid": "9deaed31-2f16-45b1-b186-28492b64ae15", "comment": "Malware payload", "value": "b8102a5e9780fed11bc7d87e953b9407", "object_relation": "md5", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#FE0F82", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708252562, "uuid": "b57b9e1e-643f-4e2d-8f24-5572623a8696", "comment": "Malware payload", "value": "8f3ac6cdd88765f6ee8def058bc1875e213ad18bc233914a509dc9b1fae9ca6f", "object_relation": "sha256", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#FE0F82", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708252562, "uuid": "85c7adce-e79b-4666-bf28-758257f4aa49", "comment": "Malware payload", "value": "b8db32f9e8d71ee6e659a7ccc0420b7a4c05713c", "object_relation": "sha1", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#FE0F82", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708252562, "uuid": "d6d47909-b627-44d6-8153-0ccb89d4a269", "comment": "Malware payload", "value": "0987620db077c33416eadc93d5fed8b5fa67d431face98c480775fad4e231dea77e763619ba84249f75d3f72c84cde9c", "object_relation": "sha3-384", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#FE0F82", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708252562, "uuid": "420475b8-771c-4b4e-89a4-1396a0fb6aa2", "value": "T138F18731B28285648BB9D1F69A99414032E1801B6C03F716F1DD46595FBABC7C2FF3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708252562, "uuid": "4662cf2d-d064-46a4-8b41-5880909506a9", "value": "192:C1fSFGnbZ9VugofDlphVCN7OXYvQLbwq4dFSJHpebShRp:C1fbUgqCsi6J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708252562, "uuid": "3542bf2c-5e7c-42de-9cea-69812d70373c", "value": 7470, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708252562, "uuid": "6d602edf-1008-4e9d-b34d-c49783250021", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708252562, "uuid": "0bf4bbd4-0fd9-4aae-ad06-93f75706089f", "value": "DiscordserviceAdmin.ps1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cd46dcf-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292038, "uuid": "092b0e11-c9c1-45e1-ba0b-0f2e05e84ca9", "comment": "Malware payload", "value": "0efcb5d466673814b14909cf9dd6f864", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292038, "uuid": "debf795f-4089-4f3b-9b26-5698928c8a3a", "comment": "Malware payload", "value": "90907764a7be697a2675a06d58e828585eee75f18dbe9333e0b34c7bf2576f49", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292038, "uuid": "350c6186-13e7-497f-9dce-255e22e51b6e", "comment": "Malware payload", "value": "5aef6d8302ebed25cbbae9ae266791b7307f1dc3", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292038, "uuid": "ca3fcab7-4505-422f-9946-11991ed4410e", "comment": "Malware payload", "value": "751f5a97fd087c867cb99e6bea30d902392d3951d7e59bd076b7932f806eb79f4efee2aae1aac795ae6d6821b7f398eb", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292038, "uuid": "68f640bc-2b30-4528-b6b2-4bf5ed4b999b", "value": "T175F47C107A01D136F9FF04B38EBD9A6E517CA921072854D7A3CC5A6E5FB5AE23B32113", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292038, "uuid": "2344f3fb-65fd-4c38-aeec-b912573902bd", "value": "e80e1bc0040e3e58438b5b8b1a77e208", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292038, "uuid": "c7dd6b99-2455-481e-a651-fc682d814304", "value": "12288:5NHPcObyW2/ageerVeZfk65L+JKggJm45Hnj476HSbYQsH6n+gGObB5OBC:5V6CbQeZ865y3gJm+U7SSBp+NO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292038, "uuid": "40b2c894-03fc-4378-a0b8-ec853726fd1c", "value": 779264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292038, "uuid": "8affc12c-b6b4-4b3b-b364-41c2613db019", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292038, "uuid": "c42801a1-0fdc-4c4d-9df0-52a50392c17f", "value": "SecuriteInfo.com.Win32.MalwareX-gen.20517.23176", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bf74631-ce79-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708273139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273139, "uuid": "2ddf013e-8865-45e4-90be-0e4ee47638ac", "comment": "Malware payload", "value": "083f867f92435e217c7d959123687fb4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273139, "uuid": "9eda6cc2-effc-48d9-b748-82558e51681a", "comment": "Malware payload", "value": "90acd520c0672a8d46d2b2c376ca6098f08137a7379f461a82acca27ab07fc96", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273139, "uuid": "0c4969ce-d088-4252-b808-d582a67f7f53", "comment": "Malware payload", "value": "d4c7ab095118639c6fea1d69a98ff176852f5ac3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708273139, "uuid": "4bdab026-7ea8-47a7-a864-d3672d410131", "comment": "Malware payload", "value": "7ef753164787b94d8a2343ba459f86bda1f9156823791c73d71824d49f1179d85a61689c19635385995307f63a58a6a3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273139, "uuid": "f5f121e9-6a98-40c7-afd0-21b368e8d6ad", "value": "T199E533207179C486E9B62B70E9D7E25120A57E4CEC33A19B3632FE3F577331A6A60354", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273139, "uuid": "11d6300c-3d8d-439e-a105-2bfab9f83f09", "value": "5b91270f885a8a0baa8cbf041dad1a7c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273139, "uuid": "f1732957-5642-477a-a9c5-19130c3c4c56", "value": "49152:4khzbyElYjNRM89Waa+DjZiKAL3ycdvcblcKk+qepO+ZslWbF9yGnpdwz3ckD/XI:NzVAM899HfZUiF5lkuOO6W5pE3Z/4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708273139, "uuid": "6f5519c4-9f6d-45ee-b2d5-25e198fde8ec", "value": 3237376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708273139, "uuid": "d732a6e1-8409-4082-a052-226d3f73410f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708273139, "uuid": "f1357019-ff06-413e-955c-7518a49e546e", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f614f57e-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708278095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278095, "uuid": "3dad834b-dda3-41ae-b583-c89729e7d3cf", "comment": "Malware payload (Mirai)", "value": "e24238fb3e2048de8e44773a82f227f0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278095, "uuid": "81203877-cb52-4c2e-a8dd-0c0ce7a2a5ff", "comment": "Malware payload (Mirai)", "value": "91e9e963fc4e34c4584336e870af41ae81cc404f77756ec486321a2efba9673c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278095, "uuid": "9741015f-3ee8-4422-952c-b3f1fa79a614", "comment": "Malware payload (Mirai)", "value": "7c88a7426a763e9ab35cca0a7515d8dccfb3cf58", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278095, "uuid": "8cdeaeb3-f04a-4b5a-9672-0e374ed69181", "comment": "Malware payload (Mirai)", "value": "9170e6e950016843cf39a3d4e8f2f5732906353d44b7a03cb8164103ec71698930ccb32f9b13dc9dadd0be5665b756f8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278095, "uuid": "e4f6a8ad-18b5-44fd-bceb-61d3ab878447", "value": "T172535CD9B8019E7DF58BEABE40224E0BF531761154921B377733FD83BD32169A816D0A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278095, "uuid": "30479fe5-9ad5-4b37-bf3c-92946ba0505b", "value": "1536:soBAmWmHv11dPBEMURJA87HONbg1pr8QOEawj0GKLUKQf80:s0wMqeuprJFjsVQL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278095, "uuid": "c01100cf-c419-4fdd-bebe-e998a9a24712", "value": 61576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278095, "uuid": "9420319c-5a6b-4a3f-86ac-a2dc93b360ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278095, "uuid": "18b2589c-85d5-4a7e-a36b-9e506ad554f8", "value": "e24238fb3e2048de8e44773a82f227f0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc410850-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249705, "uuid": "c82b2366-ae09-4023-9d2a-202ec28c09d1", "comment": "Malware payload (Mirai)", "value": "896d8136a3f9bc89ff57f765a26d0dcc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249705, "uuid": "b6377f00-3f6b-412d-bded-feddbc4917c6", "comment": "Malware payload (Mirai)", "value": "934330fce59357d02ead738867c0077373ffc65e2a1c2125a2c4496f1842f738", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249705, "uuid": "e0d11461-5db1-40e1-8f4f-5c668c8c85cc", "comment": "Malware payload (Mirai)", "value": "7b1b5791f0cfa3d4e4f52b8552a15e07d4d1edea", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249705, "uuid": "e9610dce-9655-4208-a19f-c84d8fa61146", "comment": "Malware payload (Mirai)", "value": "f5461f14d4dc52c5cb594e386bfa1b02012281d82eb60f1aa4ec705d0f2bc9890d054b3532965e1effb34f1bba7e4140", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249705, "uuid": "2006279d-5a51-4f7e-88dd-0180b3850831", "value": "T1D8937CC5F683D4F5EC9705B1113BAB375B33F0B52029EA43C769A932ECA1510EA16B9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249705, "uuid": "a7159320-b227-4372-9372-964ef7b10750", "value": "1536:xpG2cWAcCghsZcW53S8osStqU1gQI68jne8Fs8F2c/dw8SAwHEoSrtAjP0xZ:xpG3WrCEjW5iTLZ98FIcK8SFk1IP0x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249705, "uuid": "73785841-71c8-482c-9b6d-09de0940a428", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249705, "uuid": "4ca3c6ba-e15f-4da6-bf4c-67a2a8eefc83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249705, "uuid": "9050d9e8-00fd-49f4-9181-e871e3541cd6", "value": "896d8136a3f9bc89ff57f765a26d0dcc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4deba01-ce69-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708266389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266389, "uuid": "8b84632e-b5e9-4fc9-8aa8-c0ceab8741ac", "comment": "Malware payload", "value": "c55c4efae34d9e37a5c6a8d401deed41", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266389, "uuid": "47d6fd51-cf63-47ec-8edc-d2af4394af46", "comment": "Malware payload", "value": "964ddca367b66e2bfae533febe0cd6c86ef18b3bc2d8761886b09b52763d5455", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266389, "uuid": "920e86e3-31b5-45c8-9e21-7fd4d7fb93c1", "comment": "Malware payload", "value": "b76b527695abd1e22a6cb5b19e79d6bd200a648a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266389, "uuid": "941d7c0b-906f-4ae2-ac63-8be1f3ce1e76", "comment": "Malware payload", "value": "e2d8537465d61cae77800af78457df0f255b7e01ef7b7bfa92593c676fe21ed7b45ba1740f45f5ce736395e321864eb0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266389, "uuid": "48771fb0-27d5-4eaf-bab1-662dd1256bcc", "value": "T1FBA43956F784C813F16246787D1BCBE80817FDEB3E2828C776A53E4C1E787527A20996", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266389, "uuid": "9ef4888c-f697-4b81-9939-43342463b544", "value": "6144:uH7WMwGifA0Oqs0Z+KP2cod9/0uK7XLukPiAWlIhPnNzCI1tQNez:uH7WMdKJs0vecwF0/6kPiA8IH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708266389, "uuid": "dcbfbdf7-4c22-4ad8-8ee9-1b0767e007a3", "value": 483328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708266389, "uuid": "0d0d9655-5e1e-4fff-a5f5-515ed59ce834", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266389, "uuid": "2e0416e3-1854-459c-b236-309185d93852", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.30849.10718", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb30c331-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249649, "uuid": "4eff393d-d3a6-431a-b0cb-48ad431be409", "comment": "Malware payload (Mirai)", "value": "7b027ecbc664545612c9eefd61548763", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249649, "uuid": "9ece024d-7bd0-44ca-b282-4ead23b8d732", "comment": "Malware payload (Mirai)", "value": "96c5ae9a7df7296a3e8c15fbfa6d41d5864ec987779af90b31baa9183e22356e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249649, "uuid": "e4f942cb-f507-4831-9c44-3ceb60953243", "comment": "Malware payload (Mirai)", "value": "ca7a9b4d68525e6b320dd97fbf58e0f7ffc54c82", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249649, "uuid": "64a6abf4-0800-4816-bbfa-7b13ea7b0d18", "comment": "Malware payload (Mirai)", "value": "3a20891564dfb451f3a06efa9b50bcaee126a6496a46620eca1a8aeaa3fcc3e9984c5f8da6682a21b19cef9107a2b030", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249649, "uuid": "354bd3a8-0c34-4586-acb4-b3fda325a0b6", "value": "T1C804D81AAB550FBBCCAFDD3706E90B1139CC954B22A83B363674D528F54E50B49E3C68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249649, "uuid": "6c67b0d4-57cd-4270-bc1f-665f79baeb64", "value": "3072:OeEksFM+wXmOxaVB8H3NaMFuDbcpB99k+rhsKbH0:OeEnO+wXiVGdaMkD4pHi+PT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249649, "uuid": "d256ecaa-d4cf-49c0-a62f-b1356680f1e4", "value": 177860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249649, "uuid": "94ea18f2-e05d-4074-b17f-223f76232075", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249649, "uuid": "4c4d9306-644b-482e-9585-fe89d95410ab", "value": "7b027ecbc664545612c9eefd61548763", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da55cb68-ce39-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Nymaim)", "timestamp": 1708245836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245836, "uuid": "716511c7-840e-43f4-8f09-9333a25d9f73", "comment": "Malware payload (Nymaim)", "value": "2606f7001269946365ea051dfbda48a5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NyMaim", "colour": "#0E3AD4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245836, "uuid": "0760f28c-2b13-46cb-99ba-9f405272a1a3", "comment": "Malware payload (Nymaim)", "value": "9948c37ffe9a40faa8eb331323340b990776b6c4314e2c54ee0eba951c38de54", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NyMaim", "colour": "#0E3AD4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245836, "uuid": "a49bbd6a-8234-467b-ab4c-f5232d1e8fba", "comment": "Malware payload (Nymaim)", "value": "18054af4cd113981ed07c4a5b15a95cfd07fea72", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NyMaim", "colour": "#0E3AD4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245836, "uuid": "802fae03-73d5-471e-b6a1-79ace780dbfd", "comment": "Malware payload (Nymaim)", "value": "8bd031160bcbb930b16bbfd06635e1756e8cc4ba07b9867df803e6dafcc775c5255083cb7d7004f2fba8c8a45b834a5a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NyMaim", "colour": "#0E3AD4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245836, "uuid": "00c9a587-023e-40ad-864e-20fb3025b816", "value": "T12D54D01077E5D032C29326358935CBB54EBB7C653972BA8F5BD62B7F5F24290CA2430A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245836, "uuid": "c047e027-46d4-4519-a65b-6ffed4f3779d", "value": "f161fadd2b3a76a97cb1008a45afdb2a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245836, "uuid": "46ca6293-c8cb-4bac-b0c1-3cbffe4e7fed", "value": "6144:g9K9edG7jgL7DbT2vedD/T69SyV9A0gMq91jCMo4:wK9edGXgfDbqcLTISyV9Jgr5c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708245836, "uuid": "ee7c1f82-ad86-4de7-96d0-eeeb5288750a", "value": 306176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708245836, "uuid": "c80d9e74-a62e-46a5-a751-583b6b4e34f2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245836, "uuid": "e8015fe9-86fe-43ac-9b79-aa7720894bbb", "value": "2606f7001269946365ea051dfbda48a5.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a115f815-ce3b-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708246599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246599, "uuid": "48f3e673-1687-4de3-a8dd-0002c1c0854d", "comment": "Malware payload (Mirai)", "value": "13cf65c88aa06a045b6c1e60708f7b7b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246599, "uuid": "16fd75d3-261f-47db-9b08-0f6cf662094a", "comment": "Malware payload (Mirai)", "value": "9b2a34c0ed3ff3f5d64b85c3e5c5ef2621d8c9ec69e3665903b0026b4861b288", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246599, "uuid": "59c7592f-e0c2-4f86-910e-4951e8997066", "comment": "Malware payload (Mirai)", "value": "48237bfdce1a50f7e85e0c067a4601765d3d0776", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246599, "uuid": "e77fefb9-5daa-44ac-b167-a3752dc73bc6", "comment": "Malware payload (Mirai)", "value": "2e0d0c73bbcc83891f2714d0e2ba3ee35b7a6c39b6529cc95ae350d08a207816150928284d9dc6d09adc2c210b10452d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246599, "uuid": "0e5cfac3-6782-4dce-b9ad-004fda3fbaf3", "value": "T13C732A95B8818F11C5D5127AF92E158D371267F8E3DF7223AE205F607B8A86B0E37D06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246599, "uuid": "e92b98f3-a04a-4fac-a00c-8eb9fb65ece3", "value": "1536:Rgn2TTT2hps+7M2CnPSQ/x8alf1WkPDQNMEixSNRam5cJa10:HT6ps+41n6QDt1vSNRam5c4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708246599, "uuid": "eb161325-2ab9-420d-892e-15714d2122b4", "value": 80456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708246599, "uuid": "158e9015-413f-415e-94b3-8cb4912d1fdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246599, "uuid": "12d09e07-c993-42d7-b73a-af6c8eb09fc8", "value": "13cf65c88aa06a045b6c1e60708f7b7b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdf1647d-ce42-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708249681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249681, "uuid": "21de8558-c5d4-40a4-9de9-60c4ce3525d1", "comment": "Malware payload (Mirai)", "value": "9b21c1ef6bfafc4fd97b2f2256db0124", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249681, "uuid": "3fd1d388-f308-407e-9628-628c34c87613", "comment": "Malware payload (Mirai)", "value": "9f553570700f019ed6d50027b5eaad6817ba69912c67f21c626faa9d47ece2b9", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249681, "uuid": "ccecfd94-f18b-4149-b2b0-e38e05e59317", "comment": "Malware payload (Mirai)", "value": "6f223055fcb283a9aff3fad15dd3a0add6ba6560", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708249681, "uuid": "a62663fc-0240-4d8e-8e97-a06616d24da3", "comment": "Malware payload (Mirai)", "value": "5d607d8fe871216fd789278df69ec96717f5a2e5e5108dcbc70cc6ca14c9b6d69b1d91e5a9dd91fe5f8f5936225bedf0", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249681, "uuid": "bc235881-fa0e-40f7-8b5c-6de2465d1c5c", "value": "T1EAD33A17B5C180FDC4DAC5B44F9EF536DD32B1AC1238B16B2BD4AA221E4AE315F1DA50", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249681, "uuid": "22f2afb9-7e8b-4e43-a687-01eb5fd2b741", "value": "3072:tGtwnNiaOnUT6FKPT9OSQ7AOaogjV2iZlBWCgYiAnQPdL:tGtwnNiaOnUTYuLy8nQPd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708249681, "uuid": "eeadd954-eb84-4718-831a-f728d97942eb", "value": 139576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708249681, "uuid": "a6551af8-a260-4d8d-aa83-676796ba2b48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708249681, "uuid": "c5102b68-6e3c-409f-8b00-e224034fccdf", "value": "9b21c1ef6bfafc4fd97b2f2256db0124", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d46fa55-ce3a-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708245975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245975, "uuid": "60e24ebe-a24a-4d7c-909d-143874710f16", "comment": "Malware payload", "value": "2f89c319595e03f856cff169a3add17d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245975, "uuid": "ae4c30f0-2b8d-4847-be53-2a894d989ff0", "comment": "Malware payload", "value": "a074bbc8a3820a9a695a9251b170cd4fb045000059d35b85954eaab757608b9b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245975, "uuid": "ffbd2087-f83f-4145-93b6-59377df625da", "comment": "Malware payload", "value": "18bbf31f19ed1169993ec8f3993ce46f23d0f749", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708245975, "uuid": "9c8ae307-0549-4ad2-a82c-22ad81f31475", "comment": "Malware payload", "value": "dd4a02fe0cee6d8e6f9a10fe284e829c2d35ebf7649be99ed5e53e227aa919a4e30abd678e80cb5c0b9f2ffecb631328", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245975, "uuid": "aae39188-ad8b-497f-9fc9-6c7298de8110", "value": "T1840633008BDCACD4C6130D34CE465060ABF68DC8D78049AB4D277EAADBFB7B51326B91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245975, "uuid": "247e847c-b7d3-4388-9272-607836d9c70e", "value": "98304:hW0Ughn1zD8gmJUikb59sFaZw3abaqt8+Uen/xIN:hWBCn5D8gmJUrvsFaZw3HsJIN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708245975, "uuid": "9be8974b-b2db-4d03-bf87-dd73d8221d3b", "value": 3860248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708245975, "uuid": "e6d7f9a1-a6f9-40a8-88c3-addeae2abe11", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708245975, "uuid": "75176687-80e7-4487-a24c-101fbea82001", "value": "2f89c319595e03f856cff169a3add17d.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ac797c0-ce56-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708258024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258024, "uuid": "bc6668ac-352d-486c-90c6-9e21bc6e49f3", "comment": "Malware payload (Mirai)", "value": "42c46a4875e437e2b27daf2edf235061", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258024, "uuid": "2c644bb7-d2f9-481e-aa4d-c5f9d3e91dbe", "comment": "Malware payload (Mirai)", "value": "a0ef6423465d311d19ca38e6c8fc1ec9430ffa1135211a9958c4c3a737cab736", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258024, "uuid": "fa85d548-4af9-4ad8-8b48-6df8a3ddf425", "comment": "Malware payload (Mirai)", "value": "d1b6ef315116c21047b69846fcddfacb7605cf08", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258024, "uuid": "94af9d60-30c8-49ee-b3cb-075a69cd11ab", "comment": "Malware payload (Mirai)", "value": "d9c8368edbfdc57ac9d747e5a26f3bb0ff4b617834ad668b6356f957192495a977de54e6c4f70fc340eb76a786a5525d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258024, "uuid": "3e6fa1b9-f022-4506-9784-62a6699e6ac3", "value": "T144334BC4F543DBF9D84900717032EF369B33F1FA226DD997D3995A33AC92602A506A8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258024, "uuid": "edbf4998-bdd0-405c-b9c5-d90c6eccf96e", "value": "1536:vbxZ+QmM0P+IWFWidh8ds59p8ukc0iIBYF0x5L:dZ+QmBto9OPBuEh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708258024, "uuid": "517d212f-ddb9-4bde-8d3a-92d235c0fbe7", "value": 51508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708258024, "uuid": "a3420801-0127-4041-9210-e35670b0bd8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258024, "uuid": "46e303d3-a4fb-4d9a-a4a6-baf784d41436", "value": "42c46a4875e437e2b27daf2edf235061", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c1beaf7-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292037, "uuid": "afb47b37-9081-4cf9-9e45-6a6c85c47cf1", "comment": "Malware payload", "value": "2bc8e4dfc9a9a2e1ddaa723bb200edd5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292037, "uuid": "778f9b59-d7dc-478e-a091-0606dc3061ec", "comment": "Malware payload", "value": "a1dd0a1b1310abed91eb7326b86f46c905c53b825dbe67de8e9e8a258d21c5fb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292037, "uuid": "d94436fd-3860-46b6-98e7-16f731de69d7", "comment": "Malware payload", "value": "cc5db62375300872ec221dc921327e4872a2841f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292037, "uuid": "d54aa4cb-d6a5-48df-b489-84cefbea3291", "comment": "Malware payload", "value": "1efae16af642cf72f1c21771c967ac7df570d6e3d4caf8636be8452ce5a735810715570163d2fbb6c39a4a7776471713", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292037, "uuid": "4be763ce-5d43-4af0-9d06-8d4d2bb59cce", "value": "T19CD64A30C250DB16F2B395B44529974978582B241B3C15E719E4FCA93BF40E2ABBDE3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292037, "uuid": "d5a9e1fc-afeb-4343-b533-9fc9b023bb5c", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292037, "uuid": "a4ec2f8e-7538-48ed-9814-07aafe101508", "value": "49152:6FK021v7V3FEPLQ8Z7El6y4Gh0KooN7gMOg7ttXp22Zp22X222Hp2222ppBUuVkO:6F5avx3FruYrh5ooRL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292037, "uuid": "47d5a8b5-7c62-42cc-99d9-6260689b8036", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292037, "uuid": "20b7688f-d6de-4b25-8ee8-cee587684d95", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292037, "uuid": "3d970562-df50-415d-970b-480c0c798077", "value": "SecuriteInfo.com.Win32.BankerX-gen.25122.937", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6ce6e52-ce69-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708266392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266392, "uuid": "950ba3fe-9dd7-44a1-86a8-b66bab90baa5", "comment": "Malware payload", "value": "d9a1b7426590d4f07e4aeab6e7fc1ad0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266392, "uuid": "ec220173-4f8e-48f4-bd67-79353e971a58", "comment": "Malware payload", "value": "a2ee49dc2499d6c03aaabc6caf035e46083f4a400df343be558af1528e676553", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266392, "uuid": "6caa9e1d-ee27-4409-b38f-a90f4e643d86", "comment": "Malware payload", "value": "6d3e01d0675adb3a1aad2606c7c5ca85029eb970", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266392, "uuid": "c5004244-d862-4384-9061-78bc4e4a0318", "comment": "Malware payload", "value": "1e7e55a22cfe8446a95b4b5da7fa58035cd9cd86d747c79887982bf6bbe22987f40c33094a6101269212f08b6884c763", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266392, "uuid": "d1498925-957e-4f29-92dc-d11d330013d5", "value": "T18A553A16F2A05432C07B1A38CD07C6E424A3FD143D24EA4B7BB4DEBC5FB4685B9A525E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266392, "uuid": "dd28c37f-ab44-436a-bcea-7b276e6669ae", "value": "24576:OfYsEZT1XE/n1IfZJZNPSrDxYXh/pE1Q:OfX/1ENC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708266392, "uuid": "80b21984-7b43-4e57-8da3-0bfa8264ff31", "value": 1347584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708266392, "uuid": "2e9dc560-6a28-41f4-b0de-954b243be4d7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266392, "uuid": "667ad74f-8594-4de0-93a8-3137fbe2a537", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.16356.28056", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1e2ec68-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708278061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278061, "uuid": "4ab5a080-4069-4bac-80d8-47105e846d9d", "comment": "Malware payload (Mirai)", "value": "49fba2ed3b8a96a9d656267559e404c6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278061, "uuid": "c2f842e0-d8fa-4efb-9173-78bf8418639a", "comment": "Malware payload (Mirai)", "value": "a31ed483553048c95a4e14ac6ffb7b138020cb85f4a999ae2dc2372f987685d3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278061, "uuid": "a94e78c3-abe1-49f9-9e80-a6783a1f656b", "comment": "Malware payload (Mirai)", "value": "c5bba3c2a8038fea94b94eeda4454ce13e292bed", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278061, "uuid": "8f5982ed-708c-426b-aaf4-e5a2278c25c4", "comment": "Malware payload (Mirai)", "value": "0159bd70beec90bbc2b6734a16f2866ee8d260fa1245d1677acabeb8210bb96fe785670645e9cbfd62037e0d59c387af", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278061, "uuid": "770bfbda-44a7-4571-bfb2-1d31dfc42219", "value": "T1C453F8827D81AA16C7C05777FE1F018D3319A798E0EA73438C191BA17ACED1F0D6B65A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278061, "uuid": "97f85df8-e5fc-42c6-b711-d3cdcd2a87de", "value": "768:zHnEczUZv4tZy6hQfyjXI8CMRxYVsx/DeiZvspz1Y3W7wCVy/Jx+5H8hG1rmCd/p:rEFZEZyjyj48NCiZvsphYceZWTMWCBf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278061, "uuid": "31ef68e3-c8ca-4ae3-b14c-82e8b03e8da3", "value": 63948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278061, "uuid": "814a4238-27f1-4661-8bef-50e7a291f8bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278061, "uuid": "7a45f564-5e09-439e-af3b-f5df2a66c497", "value": "49fba2ed3b8a96a9d656267559e404c6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bf55c31-ce85-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708278185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278185, "uuid": "ec98ee7c-d043-486d-816d-436169df4810", "comment": "Malware payload", "value": "b47619dfc37f1d54f7bf248a0c25cee6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278185, "uuid": "d66e5a89-480c-40c8-9fa7-eca469c9a519", "comment": "Malware payload", "value": "a4e4fa49c31cbd3ece8f10d8ce39de551d3178b782c91f2a1f2f1da773be6343", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278185, "uuid": "eaeea62e-4bb4-4551-be78-ac36015f064d", "comment": "Malware payload", "value": "a1d73f9c4c42574366ebb11ddc34c1a950e55805", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278185, "uuid": "00fd443e-430f-4ee1-9d8b-33ba063ca834", "comment": "Malware payload", "value": "ab1226893d1ad70f0022ee5aa0cbbadf776d2b6c6be33bc173d5710e949768b01c61542f69eea9f167bdb46526b5317d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278185, "uuid": "3e2f7ce4-c063-4a22-adcb-6c95af06dafb", "value": "T1F5428402B7F8811AE0FB7F396EB653218B71BD565C3ACB2E1481111F1DA1B408E61B77", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278185, "uuid": "8022631c-70c5-41b2-adee-eeca1e450710", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278185, "uuid": "d78f12fc-1e65-4ce3-9448-bc5d7fb28d30", "value": "192:lHYljpvOeNvvI0m4M54Y8gDRNQ8awBJCmd9XtP1F2zdJWDHonh7BpmCnR:l4ptnS4M547gDRTxRNAzhtp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278185, "uuid": "c2c72317-657a-4f56-89e4-f86b8b241afd", "value": 12288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278185, "uuid": "6fc76cf2-39cd-452d-8063-a75afc16431a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278185, "uuid": "5015dedd-f1d9-476a-b52d-fa1ae24d25fd", "value": "smi.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f7a4920-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708277735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277735, "uuid": "abb6653b-537d-4dc1-a96e-61d77fb7f262", "comment": "Malware payload", "value": "a6a9681c39ff5b8f64011964b0093d20", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277735, "uuid": "5ae7d28a-1dd9-4870-8b19-010ae40e9af3", "comment": "Malware payload", "value": "aa1b1b391ecb8af9b4c444cd40db0ab270a5e735632551ba0e8ae0780e48d956", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277735, "uuid": "50c2375f-6615-4e70-a651-cd7613a23c92", "comment": "Malware payload", "value": "a6163719d1bcf0fefab4aec1583176ee0d7c2951", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277735, "uuid": "5eca9b6f-abac-4737-9835-c5860f942c82", "comment": "Malware payload", "value": "b37f8a5dca2192c9d09652f05c5d2033c9ed1979147a335c361b560269db8440c28f60254b5cb1ab52f1b83a6bbd34e5", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277735, "uuid": "cba88f40-e350-4384-9fcc-7929641ec181", "value": "T1ED179DCEBAEECE6BC612967CAED0BA3262D47E14E30133E3FD46895D24795C444F0964", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277735, "uuid": "05a359ee-5046-4408-ac5a-d489cddb718e", "value": "32db32733ce59cf2385286705a3a0db2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277735, "uuid": "2a19bafc-525c-408c-a172-aec358940a8e", "value": "196608:XClMS3/gKGUG8fwMzr3v+GOQScr4v2fwMzr3v+GOQScr4vL:Xo33/g2/fFzr3v+D8XfFzr3v+D8y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708277735, "uuid": "d72a147a-58bd-4595-985f-40ed6272ea67", "value": 19149824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708277735, "uuid": "95ba86dd-5ceb-4cfb-8014-6bc630b40d9b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277735, "uuid": "4fa0c118-ba53-4198-8171-99b3030c07bc", "value": "minty.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b2a5dc4-ce96-11ee-b7ea-42010a9c0006", "comment": "Malware payload (DCRat)", "timestamp": 1708285512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708285512, "uuid": "31bc13fd-a6ab-4302-8f55-50a8811e5a15", "comment": "Malware payload (DCRat)", "value": "2654cf7f87e8aa432528dc78fedb324f", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708285512, "uuid": "3bbc63ff-9570-4e5b-9222-c67c41e18c4f", "comment": "Malware payload (DCRat)", "value": "b018f5a66001f1ccb3553465778d7a65d04d7a0925ac925b692bfbedcbc08295", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708285512, "uuid": "b5b851a6-c225-491e-bbb5-87bb50f0192e", "comment": "Malware payload (DCRat)", "value": "22c2770eea77b91b30e5bfc7199a321339ec92dc", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708285512, "uuid": "18c5a2af-952d-416c-a5ba-dc729198abdd", "comment": "Malware payload (DCRat)", "value": "1ebff5c7af3df6d636a8b8c42e3dfd822fc1eea81c30c2ea7055c07229cc385993f876302093f29e48ddd325b6fceeb8", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708285512, "uuid": "c72ab0d3-77c0-4a50-8c3e-99c37748ac03", "value": "T1E995BE01BE40CE11F0191633C2AF455447B0BC116BAAEB2B7EBA376E59123977D1DACB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708285512, "uuid": "e47485c7-078a-458e-92c0-8767f031a166", "value": "fcf1390e9ce472c7270447fc5c61a0c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708285512, "uuid": "1e134d2b-cb56-48a1-b32a-2b125b16df56", "value": "24576:u2G/nvxW3WieCfYiKFt+77kwwVomlSUXUkv1nKSW8W5xdf9w4/Zo2L9vU3gtTqUK:ubA3jfYilPmlB9NngLfSMouvKEiV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708285512, "uuid": "51d3dd0a-006f-4d0d-85a0-edd1a815e21f", "value": 1920125, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708285512, "uuid": "54486ef1-78de-453a-ad34-fd14a2b9048c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708285512, "uuid": "8c561230-08c1-4d9a-9d69-9b9881f1dfc7", "value": "2654cf7f87e8aa432528dc78fedb324f.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7a0126d-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708278071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278071, "uuid": "eef0920f-ba88-4c31-951d-66efa560b340", "comment": "Malware payload (Mirai)", "value": "64e27f31bab52e28d898b314a53f4c9e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278071, "uuid": "4643ae81-86f0-4fc7-8cd1-ebb7f88efb37", "comment": "Malware payload (Mirai)", "value": "b1122ff0cb6abf1a1e9443b9e2150a7d19c7fbfe9c72b570b4735a1f05d23939", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278071, "uuid": "1971e943-6d01-4bcb-9ad6-f7fc239ca4a1", "comment": "Malware payload (Mirai)", "value": "e1b03e35272fdf9081f1628546bbefa149024940", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278071, "uuid": "c3b5ec90-503d-41fb-99ed-fd3ab092e8a5", "comment": "Malware payload (Mirai)", "value": "55bd646c0e8e6344b15b686385e21bd2aac9b7b1d4b5ea5329313bbc7b909b232a08ec54f17e02d7b8bc77228bd9c45d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278071, "uuid": "80a807bd-9e0b-43bd-b8d2-d37e2994a488", "value": "T184435B01BB584E07F9D61EF2393F1BE487AEEE8012A4B585690FD7454235F33498AE9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278071, "uuid": "2f60ff2d-8397-4d56-a322-83022f744486", "value": "768:W6J6a5X+lR1+XDRJL7bPzRWmA4DZeF6PIentQOYz9buiW2yH5GdSzdTVHkcIJpE0:KlmDHUmAKZS6Pkzh5X+TOcIkBy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278071, "uuid": "c78f7fda-da96-41ff-b5a6-a13a79720395", "value": 59720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278071, "uuid": "65148c86-d864-4ab6-9ceb-e55b654e1185", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278071, "uuid": "49d59ef0-1fd8-49c8-b826-cfe180e7a89d", "value": "64e27f31bab52e28d898b314a53f4c9e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81740df6-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292073, "uuid": "d30ded8e-659c-4d47-b73a-c1d8fcd1f17e", "comment": "Malware payload", "value": "432fa7a3693555da175422b53dde0a30", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292073, "uuid": "39207ba1-383d-4359-b61e-4854f483d6e8", "comment": "Malware payload", "value": "b69af5fc63194a18f9999dc39e968363253ccb48f881a2e5007e028d389fa868", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292073, "uuid": "482a5abd-ebc6-4571-966b-b8d35b17a2df", "comment": "Malware payload", "value": "b3a522dcea3ffb9536c922f44506f68de22bae4e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292073, "uuid": "44a1d3c1-62e1-4aa5-b6b3-689ffb0ac575", "comment": "Malware payload", "value": "2cc51cc52a99bbfb46e773de26feab5dadfa99a7e64627a03c1f820bbd217e30323a7b99c1acb039451c5e3cb3264b9a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292073, "uuid": "43ecf011-5d23-4f96-83db-541c76fe454d", "value": "T157D64A30C250DB16F2B395B44529974978582B241B3C15E719E4FCA93BF40E2ABBDE3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292073, "uuid": "4d165432-2251-40ef-a85f-4c8a7c4e457a", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292073, "uuid": "a65e9c9e-4c60-496f-ae56-c3c7b7694472", "value": "49152:6FK021v7V3FEPLQ8Z7El6y4Gh0KooN7gvOg7ttXp22Zp22X222Hp2222ppBUuVkh:6F5avx3FruYrh5ootL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292073, "uuid": "787a92d5-5845-4acf-b123-f182b136b8e2", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292073, "uuid": "ec00436d-621f-4c66-884d-41c16c8e8f6a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292073, "uuid": "31703c48-0c21-40bd-ba45-26fc31450869", "value": "SecuriteInfo.com.Win32.BankerX-gen.11263.19764", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b57c649a-ce69-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708266390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266390, "uuid": "fdbb36a9-5bdb-4a78-9f76-f0b429089610", "comment": "Malware payload", "value": "5da60a7f4dafa560440caa1a26707808", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266390, "uuid": "dc980fe3-e81b-4b07-a7e9-d28b7f145bc0", "comment": "Malware payload", "value": "b6c304ae01f257dab15a73e6a745bd68852181989b0e9fb88d427cb8a166fef8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266390, "uuid": "a86a8283-9905-4e61-91df-ad38da6cc0ed", "comment": "Malware payload", "value": "d47ab63a9eb0b09a12fccb821193e3435c706d08", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266390, "uuid": "db8fe24c-5e69-4b00-b263-6a7be7b9ad31", "comment": "Malware payload", "value": "f81de73d25c2e499f948b6a00a60bc91065ec8ae4b0f5f29acb90d1a9cb0208426446ddf1ca88450f1c2b7ae8c1e393e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266390, "uuid": "52b78729-1424-4b11-af1e-8f8df7e9ac7b", "value": "T11D938D07B2A1D416F1A59FF84A3D8A849167FEB15C38160EABF60E3E0E21341DE74F46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266390, "uuid": "17f7d715-fc56-4d01-bdf1-bbd4a79f0864", "value": "1536:UyEq5nyMz6C8xiBoZIyqi1kg2EqrYRsZ2:UaJ6C8xcoZIli1IEqrYRsZ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708266390, "uuid": "b981cd94-e96a-4412-90cf-4c0628065f2b", "value": 90112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708266390, "uuid": "bb2ea126-5fec-408b-b78f-765b29d2e6a7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266390, "uuid": "3c04fda7-08fb-4ab8-b58c-266ff99f5416", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.1035.4295", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97a3d6b1-ce3b-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708246583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246583, "uuid": "3356b514-cfce-425f-8014-ce3beb30d867", "comment": "Malware payload (Mirai)", "value": "f429fad57bca1c1cd594a724115524e1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246583, "uuid": "cce4019a-9fac-48e1-a369-42ce5d39aed4", "comment": "Malware payload (Mirai)", "value": "b6cd33cee0327e52c74c1e346ff7086a9fcbf37a333318bda2fbfbcb1bd237e5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246583, "uuid": "0c8fb752-690c-46eb-a411-d5e795b33491", "comment": "Malware payload (Mirai)", "value": "a4a5fc7676fdbc29f2e4b26fd56b34f8ed503c09", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246583, "uuid": "3dd9d51d-9934-4c64-bb63-0d2a5c87ca01", "comment": "Malware payload (Mirai)", "value": "b58ff298be3f3cf11df3de3f3242e4959e8c947d928e61a30345a1a99ba972f2db60297bb9184c5be7993f7435c56a26", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246583, "uuid": "37095c44-7567-4b08-99d4-2f5f93e072fd", "value": "T1246339D6F8019E3DFC0EE67A84550E09BE7163D112831F266BB7FDA36D720A66D02E41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246583, "uuid": "818cee1e-68c8-41f5-9bbf-fb88bff16bf3", "value": "1536:HL3mMsvOLG5XJrr1Dctrx+RHdtIi5zFY9BgOo8QNLRvQ5:rCatFsOQgBJy1m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708246583, "uuid": "4f497ee6-1de7-44b3-8d81-30eda7dced20", "value": 69148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708246583, "uuid": "86366a9c-5e41-4f99-85d3-d58062911a3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246583, "uuid": "1250b1c6-79cc-48da-950d-aaeae36f7043", "value": "f429fad57bca1c1cd594a724115524e1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea66d00d-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708278075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278075, "uuid": "2cca4152-d7a6-4415-a408-f9560f4fe7e1", "comment": "Malware payload (Mirai)", "value": "ca003adee80a69a3dc3ac0b699b81b7e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278075, "uuid": "c0e1b94b-969f-49ec-a714-6e9a870664e6", "comment": "Malware payload (Mirai)", "value": "b8d291edf226dc928a9ccef9956832d61a65b6eec346a2be35a9cb7f3ce12379", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278075, "uuid": "548a2f9a-b7b0-4b12-984f-72c13e0dc972", "comment": "Malware payload (Mirai)", "value": "da9a817b3cdf1759510cedf33a65214bba56f590", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278075, "uuid": "884ac5e3-c359-40da-87aa-8f219f15f6f9", "comment": "Malware payload (Mirai)", "value": "bf434930c14ea58573d8eec877e3e71dd2e8c58de6684faba798447c4aea7fe480c4f99e8e788b570b47237b0c75327a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278075, "uuid": "77420b7a-28d2-4de6-8626-c5320c55dd14", "value": "T1C153F8827C81AA15C7C05777FE5F018E3319A798E0EA73438C191BA17ACED1F0D6B65A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278075, "uuid": "9bf0cbd9-1853-4428-aebe-ac1088850323", "value": "768:R3nEczUZzYHTg13Je1t0zYRx0v6zJpbLA57MQHiLwCVy/Jx+5H8hG1rmCd/574yN:ZEFZyTg61tsYJLA54JeZWnxCBf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278075, "uuid": "3a1aedd5-b9b0-4214-bcfa-38c7be0676a9", "value": 63948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278075, "uuid": "46f68ffb-2557-4e49-a8f0-b6258e403acb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278075, "uuid": "9e147835-8bdf-46d4-9dd7-bdd9c39f5da1", "value": "ca003adee80a69a3dc3ac0b699b81b7e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37e7c6a8-ce56-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708258019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258019, "uuid": "ac3e0725-6d71-4f06-828a-94faab19d708", "comment": "Malware payload (Mirai)", "value": "f744e6917c28166692b170113cd460b4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258019, "uuid": "05411393-828b-4d9a-b609-3cc54f8def2a", "comment": "Malware payload (Mirai)", "value": "ba91dedcb176661a66a540efefbde5f1aea5cca2d071aa4dca0fdcbe86f288aa", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258019, "uuid": "d0673fa9-7e3c-4d7e-be23-365001e26c8f", "comment": "Malware payload (Mirai)", "value": "79665791941b78c5f264bcc57273ce6181f579b4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258019, "uuid": "2aca68ef-701e-4e14-8266-b15eff100d67", "comment": "Malware payload (Mirai)", "value": "2dc28b5b4e5d8fcb5ff26c615eafe086a2eab94aa9b29ec8335ec9ee05c8ca33abc11c000f55761fd8907f121ffc9fa8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258019, "uuid": "3a04a867-8a43-48fa-971c-e81d07aa42d4", "value": "T140232A96F8829B2AC5D022BAF57F995C3754A7E4D3CB3227CC601B207A8650F1E63F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258019, "uuid": "ca5f5ea0-5307-4d8b-87d5-8c9f6184cd21", "value": "768:1Gg7wgy62tyWWEUgpdYNlciq5HtfA/yEQMHpYPf+QskU41JpXJxhoajXYZY10UO5:326EUgdYNlGS/yEtHpwD5RjIa10", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708258019, "uuid": "76f2f02f-695f-47f4-84fb-e96310e51cb5", "value": 47728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708258019, "uuid": "2a9e1a72-18a2-48d8-b13b-c230c638dd96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258019, "uuid": "20a4910b-2567-40de-a96a-c52c30caf0d7", "value": "f744e6917c28166692b170113cd460b4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ceecdf5-ce0d-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1708226594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708226594, "uuid": "72c71406-ff46-40cc-9689-fc578713fe7b", "comment": "Malware payload (RiseProStealer)", "value": "c9119a90327ac717b3b5622a15b9f594", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708226594, "uuid": "15de88e0-4e43-4111-8679-0863d3be602a", "comment": "Malware payload (RiseProStealer)", "value": "bb1ef7853be831bf58f386766b713e2ecba1aa3bba48ff788573076cbab9a232", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708226594, "uuid": "ec0e9b5e-e6a8-4d61-8b2f-8be7b7a0c1e6", "comment": "Malware payload (RiseProStealer)", "value": "628876e7e3ef092567fa7804c5fa7829b58092c9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708226594, "uuid": "1b6218aa-c3b4-408e-ba4e-4c3a883252a9", "comment": "Malware payload (RiseProStealer)", "value": "47651f7b8a0295162e42b31d3e573268a65d506528228cfa4970d1dee12312e2b62a65524528503204f802b5ae769def", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708226594, "uuid": "b3b2647b-8d0a-45c8-8525-fcbded4feda2", "value": "T10D1512CD6D4084A3E65877B148C1FBBD023EEC96A91590DC2DE87F57FA36E281C23519", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708226594, "uuid": "1739c8d4-09d2-4f9b-b227-8aa7eaf924ca", "value": "2388fee6ad8ce4f4a35dbaf64e2da01a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708226594, "uuid": "7e5b8b56-f0e4-4cc3-9652-b8f83aea0b69", "value": "12288:KPGhyuEYPOtlxVWnTy4NLzlNCnkJEDev2z4DYI+bwH8CnnFgqf00rfUeypcyW:Yjx2OXETym5NCnzDzYTMqrrfVovW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708226594, "uuid": "d6c521f0-4533-4c5d-8612-d2dbb3ea8ffd", "value": 921760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708226594, "uuid": "bd924432-19ab-4b58-827f-27f011a36ef3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708226594, "uuid": "17c1a84b-fdc8-4bbc-a326-7ae07eece246", "value": "c9119a90327ac717b3b5622a15b9f594", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78e97417-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292058, "uuid": "b14f429d-adc3-4b29-944a-5facfd97c259", "comment": "Malware payload", "value": "9c07f7d79b94da0214e051d81e579d4d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292058, "uuid": "3b18671b-cd41-4570-914c-95e3d0cd3248", "comment": "Malware payload", "value": "be25977d6c7db97a4c10ddad59406337b82582d3bb5d578bbda0c8ea903f1555", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292058, "uuid": "fc644dbe-ea53-49cb-9820-4daa10d99039", "comment": "Malware payload", "value": "46aa1582603763f67c9fb627afb56c4d3da9b55d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292058, "uuid": "d34929c2-a5b2-490d-9ca5-1df7f71b3bfa", "comment": "Malware payload", "value": "bbcaaec0a8bf42467e3566f1da8b04c7940cc88c188beaaafa618e54dc648dba0fb9554e8bc5867dfa5a41fd6bd9388b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292058, "uuid": "e705599d-8936-4fd9-a5c1-34c89854211a", "value": "T10CD64A30C250DB16F2B395B44529974978582B241B3C15E719E4FCA93BF40E2ABBDE3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292058, "uuid": "908545c0-8c57-4ca1-9b34-49d7e873ba06", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292058, "uuid": "42b594de-baa9-448e-84cf-c34ff7d11f1a", "value": "49152:6FK021v7V3FEPLQ8Z7El6y4Gh0KooN7gvOg7ttXp22Zp22X222Hp2222ppBUuVkz:6F5avx3FruYrh5oojL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292058, "uuid": "8e908fe9-70c6-4ddb-924d-ad236ee6f686", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292058, "uuid": "137d6ad3-8782-4473-8c3d-343ae3dd3b2c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292058, "uuid": "694d4588-7c44-46d4-83c7-706a6da85ca6", "value": "SecuriteInfo.com.Win32.BankerX-gen.28501.11576", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ef0f9af-ce4c-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708253736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253736, "uuid": "e99dc3bc-b360-49d0-8a79-fec526a2aebc", "comment": "Malware payload", "value": "eaa10ae5c43bc3acf4245b22d4b70050", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253736, "uuid": "ac1b1ebc-1818-4df4-b126-497a21bc8376", "comment": "Malware payload", "value": "bfbb67a72c2e129b59e06ab2e5ac44b712bbc90f030236a8ee2a47ae90717755", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253736, "uuid": "e6b45807-a3db-40e7-96e0-4b6002e5f60a", "comment": "Malware payload", "value": "d6a2598daee7c5db8398915b0736953060dbca39", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253736, "uuid": "dbb81acf-2500-4eac-adf9-0a1136b37e53", "comment": "Malware payload", "value": "b2164d47b2bc33c10c52c94da97f3f6c512415c69dc7159ea53f1af71aaba1ff8955eca1291213a1d8b535fcbf430c3c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253736, "uuid": "2b22af9e-08a8-4fdb-ad41-924e4056af67", "value": "T1193623E73212D0E2E46846B4595DA0E15B9A6E3D6E73401AB51F3BCDE7310CDBF06EA0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253736, "uuid": "fe0f6135-b23a-4541-b164-7a840521627c", "value": "49b6343a7e296cc33dfa349b97649cac", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253736, "uuid": "a4a1e8f3-8034-44c0-a164-5fceb991f98d", "value": "49152:brcrVzPIkVly+g20eZJ6qA/9JtYdMP+tL9Cpf9PTIkKgwWyst/lEzAzSgzsvtsop:bkRI6WeZJ6jxRqO4gwgY+SgYKgTBOW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708253736, "uuid": "7bd3ded4-d4f2-425c-b607-8e47b564c5e9", "value": 4883494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708253736, "uuid": "5e1d4f03-cba2-4f04-8751-072de6240c8b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253736, "uuid": "9a94f838-0d0d-457d-9787-443b01473283", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ed265bf-ceb4-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708298564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298564, "uuid": "9965b43e-d67e-4230-8014-fcda3c5cbe4a", "comment": "Malware payload", "value": "f129c2d70c5291cfa2e3dcd9d895e058", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298564, "uuid": "898197c1-e7dd-458a-a578-ebb924d4f012", "comment": "Malware payload", "value": "c50f48678fd3865df84e60b5830a72acfcd687e56e15b267725e3a0104a9cdaf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298564, "uuid": "e4347e9f-3792-43a1-93af-5a4418c50ef8", "comment": "Malware payload", "value": "ef654fe5a0d33d4c38d4c594e6a5549dc642d7ee", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298564, "uuid": "a49f3266-ec9d-4f3a-9b9a-77ca086d5d60", "comment": "Malware payload", "value": "39d031fd2cff783aa39bc6c5e35f815ecf597ee222b7f075114818e1861042b3a8a62123c7dcd3c8a386667deabee91e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298564, "uuid": "bd88109f-e37f-400c-a515-19bb8fd52258", "value": "T13F557D42E9434044CB1D27F00EE2E33F1A6551976EB6DAC7E6E4EFFB9D62930952E210", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298564, "uuid": "cae8ebf0-5452-487b-9f02-4fc362a676d2", "value": "12288:PQi3zHnKK6lmsmZ0xotnpME/zx9xH0HQu5mAQrL1iF1H:PP3zqK6lmYxOnpMKLr/gF1H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708298564, "uuid": "a7bd4dd8-8288-4324-a79a-309d574a54f6", "value": 1314816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708298564, "uuid": "716a6168-0acb-4b1e-9412-55c528b0e783", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298564, "uuid": "04604524-1550-4a97-9c96-41c1471c8ba2", "value": "SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.1709.7346", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68b23f81-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292031, "uuid": "7fbcd7bd-805b-49bf-a2c9-e82fa59422b9", "comment": "Malware payload", "value": "ad213615b2111053b385b32eefca9521", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292031, "uuid": "85e512cb-0c6a-4bd8-b66d-338e35b38fd2", "comment": "Malware payload", "value": "c7a090f74344d3da4543690d9783f69173c40b1ec7665e4ea20989ba06e103f9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292031, "uuid": "a8988300-aa94-4499-96f6-9762a08d6eb9", "comment": "Malware payload", "value": "55e6bba11bda28985766359f208cb9bf16c0c41a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292031, "uuid": "f95db425-4acd-4b89-9fe2-cfda3790bf99", "comment": "Malware payload", "value": "9e98ac0e09a63f0fca24a63315318e2aa997e86c734130ff651b970bfc4bda0d4303adfe068d71728cb55288f5d61ca3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292031, "uuid": "db798c21-84b0-425a-9b22-18d56198c601", "value": "T158D64A30C250EB12F2B391B55529974978186B640B2C55E709E4FCE83BF81D2EABDD3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292031, "uuid": "6d088fd3-8855-4f23-8901-183a1350274d", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292031, "uuid": "171964ad-1e5a-4346-aeb7-4d4a99799e30", "value": "49152:atVplF5UZz/h5kVXQ6iIBiRvYhPD6CS63Og7ttXp22Zp22X222Hp2222ppBUuVkC:atPb5qvkVX1iIwAhL6CS+av1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292031, "uuid": "5d110a1a-6250-443d-bc88-fcd7c9f11548", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292031, "uuid": "5930af5d-5a81-4d18-a5f7-f61c52a86184", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292031, "uuid": "695007b1-28e2-43ae-b96f-d24185ce9bf1", "value": "SecuriteInfo.com.Win32.BankerX-gen.8958.22857", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c54b87fc-ceac-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708295193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295193, "uuid": "c13394de-5034-40c4-83d4-3ef0be49cd0f", "comment": "Malware payload", "value": "4c80b117d6c1d855180bf532f3d10aae", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295193, "uuid": "675c7f0f-d2f9-4f17-8f50-9d610b669a6e", "comment": "Malware payload", "value": "c7b59c715a138c8d0ec9056879520f86083d0a59cc300f303fc2f8484c789229", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295193, "uuid": "34ef2b65-054a-4308-9a82-df4bffe3d35d", "comment": "Malware payload", "value": "e395c9efc3d72c3ec40e0b4b17fd91e3a6788738", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295193, "uuid": "3621769a-f2e1-4594-9896-6ecde115ce55", "comment": "Malware payload", "value": "376bd5e7f0554e65f948ab8a5c0d7c4a31e7d63f0f63f0373240472e0c70bd4fa43216e6291339b970ee091f4b282891", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295193, "uuid": "4d91c6dd-4603-46ba-aebc-c4649b37b5be", "value": "T152632B1379418AFFC04BD1F007FB6A399922BD7E0936B2A573A4FD922E85DD12D1DA10", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295193, "uuid": "ddfac9c4-f3e5-4a87-a71f-609ce4c44a7e", "value": "1536:xqfDrEmNbvPdEBi4uCISrWBoMReNiDBpuNTHyqELT7kwwVZL:xm0mNLPaQ4uYrWXEiDeNTtW7kwwVJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708295193, "uuid": "3470451c-7e4d-436b-b265-34788b5b32f9", "value": 71944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708295193, "uuid": "55b67de8-018a-4efb-91d2-21baac885741", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295193, "uuid": "3620416d-d96b-46a1-ab2a-fab194a7bf54", "value": "4c80b117d6c1d855180bf532f3d10aae", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "870611ed-ce77-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708272325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708272325, "uuid": "9a13bee4-8410-4db1-b9d6-d9dc72053af3", "comment": "Malware payload", "value": "06d778c4911581223cf115a23216c7a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708272325, "uuid": "88907893-50ab-4acf-a28e-0405e085fb84", "comment": "Malware payload", "value": "cd3f5dee5fcf1f1a4fa25174e5e8c73957b5967f8e927b26877fd3c84ea56763", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708272325, "uuid": "e4583f54-595b-4a3e-ba97-091abcdac49d", "comment": "Malware payload", "value": "779cee4e03e18b9ac36e2c6a53052081e8704854", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708272325, "uuid": "ca3cca44-9c59-481a-82ce-ab1e41d72caa", "comment": "Malware payload", "value": "a61b6fd005b78c9f19c23969979efc5cfbf69bec74e6d0b4665b0878cd78ac7461337261e08df087aaea56479d9835c9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708272325, "uuid": "245f6bd8-b1ba-4340-a004-52225f623c89", "value": "T1E9E2E1B96E014325E96DD1FFA3E20F622D6906F46603E48B940DC79BCA8306035A3FDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708272325, "uuid": "82f1a8f0-388e-4e93-975d-5c5652eff94e", "value": "768:kjEXij0E8+Ysb41g7y3OHFUWRIAPO7OYYhJgGlzDpbuR1Jcz:AEXiA1WO3OHFUWuOSxYzVJu4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708272325, "uuid": "7e4af3d0-fa5d-454d-af29-aeb3e3f173d2", "value": 32996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708272325, "uuid": "eb829ea8-e125-46d3-be18-0a16206d07e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708272325, "uuid": "2718e00f-ee9f-46dc-b880-083c23d4fc77", "value": "mips (2)", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7aa75948-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292061, "uuid": "ed481065-21b9-496a-a69b-68277bb98bd5", "comment": "Malware payload", "value": "a2b4833479c67c15bb03cdc8e7c33b2b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292061, "uuid": "d6272ff0-8b63-4e31-bb61-a93e0ae546c8", "comment": "Malware payload", "value": "cf47e96401fa225936f79759ae7e7e7a4ca4e01251f3d5b77137588941196bf2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292061, "uuid": "e9275063-6392-4d39-9a76-eec6422318da", "comment": "Malware payload", "value": "37f986284d021e0cfa95aaabbe6c1f170983f49e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292061, "uuid": "ae887f20-3114-49f7-891e-a324d12dc50e", "comment": "Malware payload", "value": "cb6389feca38ca45bf9ad6af732cf2af7c5f0d129830ace3d51d9a5807c178417cd0568e8f9cb94f41f17055d8deb74a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292061, "uuid": "6b8ea1dc-c45c-4b77-b049-74636f2fee1d", "value": "T1CDD64A30C250DB16F2B395B44529974978582B241B3C15E719E4FCA93BF40E2ABBDE3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292061, "uuid": "72a9a7f3-d8c8-459b-8f86-04032b206819", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292061, "uuid": "7b35ebcf-d071-449d-af22-546e24cf1660", "value": "49152:6FK021v7V3FEPLQ8Z7El6y4Gh0KooN7gvOg7ttXp22Zp22X222Hp2222ppBUuVkb:6F5avx3FruYrh5ooBL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292061, "uuid": "6377e283-856d-420c-b4f7-26663d18a629", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292061, "uuid": "32f15dbb-2ae4-4a2e-8bba-3ddf1f725a09", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292061, "uuid": "60b13875-5a50-4f63-8bd0-2c276275304c", "value": "SecuriteInfo.com.Win32.BankerX-gen.27176.16407", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83185084-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292075, "uuid": "37fb6672-e18a-41af-8d29-ff6aaed7b4c8", "comment": "Malware payload", "value": "d4f3af5642077a8b853163dc5f89a3df", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292075, "uuid": "c9a9a559-2c58-4797-9e03-ea5510c56c81", "comment": "Malware payload", "value": "cfe0e566e9b2af220f05ffd995f8781f1d6f80418c27a810f2a22a2f68e98ae5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292075, "uuid": "b916ef6b-2645-4003-9897-3f490e75d559", "comment": "Malware payload", "value": "527dd18a491df5a3f0e30d6c73d00325db91b179", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292075, "uuid": "7d5d5e64-8729-4a80-87f7-a72ff2175481", "comment": "Malware payload", "value": "2b348a4b1eecc028d0635f8585337b4e7553d025a1d2b850106537efa66cc3da01fc498ab42e2f5cc2876ac5cf963a69", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292075, "uuid": "0831d69b-3fa7-43cd-ab37-2a6e3fdf8ae1", "value": "T152D64A30C250EB12F2B391B55529974978186B640B2C55E709E4FCE83BF81D2EABDD3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292075, "uuid": "16594ded-b537-44f3-a571-32516642dab7", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292075, "uuid": "5d4b8fbb-69e2-4d57-88c8-21117cca9863", "value": "49152:atVplF5UZz/h5kVXQ6iIBiRvYhPD6CS63Og7ttXp22Zp22X222Hp2222ppBUuVkM:atPb5qvkVX1iIwAhL6CS3av8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292075, "uuid": "e464aa39-c340-4270-93e3-35923a6c438d", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292075, "uuid": "aa973901-d018-41cc-9d54-9a8c8b892a98", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292075, "uuid": "4f655412-b4e5-4693-9d25-c4f47f0dc966", "value": "SecuriteInfo.com.Win32.BankerX-gen.29411.9882", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "655f515d-ce3c-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708246928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246928, "uuid": "4af93452-e0b3-491f-ad9d-c4495dd9b6a1", "comment": "Malware payload (Mirai)", "value": "6c9dd475d9b30265f4b8978a1659dc4d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246928, "uuid": "5eba873c-51c2-4d6f-a186-7592fa1ca9f4", "comment": "Malware payload (Mirai)", "value": "d1dbaf38ba66685a80a1886416e4256e5a52889d0d0f3cd2c998f4d83dc26b28", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246928, "uuid": "f3c66a87-3c42-4d10-bbb4-a256397e4898", "comment": "Malware payload (Mirai)", "value": "d2124f907cc0463473220372e8bf9f9ccc36ae15", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246928, "uuid": "3dc9bd3d-5b6a-4e85-99da-5a701a862e80", "comment": "Malware payload (Mirai)", "value": "146b1198f2bbf451dca1e841c77e5b98d9c861110292b2048e040eb796f98536fb250bb8de901a000099bf9d94d6c20b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246928, "uuid": "dc25deba-470d-4358-848b-8e77b7bab208", "value": "T1B1538D75E42A9D14D0840134B4A8CF705F63F2C982663EF75AE586B2540BEACFA0DFE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246928, "uuid": "5737ae66-76d1-4c29-a11f-401a1e6bb4dd", "value": "1536:WjhwW9QG/+DrWgJVKqlk3viCwCl+Ja10:WuW9QG1abO3viCwV4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708246928, "uuid": "4a0559dd-9e27-4c04-b9e9-e4704007724d", "value": 63760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708246928, "uuid": "d02d952d-a35f-4a18-a1a2-a60cd13490ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246928, "uuid": "58560dd2-4b26-47f4-aa83-3d2942fd7fc5", "value": "6c9dd475d9b30265f4b8978a1659dc4d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51eae065-ce78-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708272666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708272666, "uuid": "e3c09d84-c090-4920-9358-49d27b36f97b", "comment": "Malware payload", "value": "4c2ef478ccd6e5f6ca8a28400342dbc4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708272666, "uuid": "67430d92-7c02-4563-888d-4201241df187", "comment": "Malware payload", "value": "d24751ab32fae391612ef0ccd33b5a85d338893aa69f72b3c05b82331d9f4f29", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708272666, "uuid": "4316d253-9644-42a2-bf01-acfe7f74cff6", "comment": "Malware payload", "value": "de26db6c1478331708bea7191545afc718e526e0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708272666, "uuid": "a81d6595-f416-4dfb-bcbe-179fa926433b", "comment": "Malware payload", "value": "025064a6efa14bcdde11f4437ab746ca600294af3f17411a014ae9309abfa15a4c3da39cb8eb7b78caf4af96b9b74226", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708272666, "uuid": "3ae2e4ba-519f-4c7b-9299-0f4d55e8f2a2", "value": "T12CF533EE644514A4D096BCB84C1A687077302D9A4E524B27EF8877D5E23CA93FE7FB04", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708272666, "uuid": "55ab0e9b-5cd0-4721-9153-6d29d54bad61", "value": "5b91270f885a8a0baa8cbf041dad1a7c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708272666, "uuid": "39652165-8a6a-41ad-9a88-a2f2c420c303", "value": "98304:WGbzKcp04BTJJfb/mRU89LFHhcK/czz1TV:ZbzKcp04Btt/gpBcqwz1R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708272666, "uuid": "0f397b12-3082-4315-9ef2-b9910297b8c8", "value": 3408896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708272666, "uuid": "4fce481a-8bf2-496b-b20a-91078f90a9a8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708272666, "uuid": "521507bb-e874-4761-aaae-d4b439c5e71e", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3af4a557-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708277781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277781, "uuid": "5956aa7b-15ff-4da6-90bb-a78dd1b912c4", "comment": "Malware payload", "value": "bf771c3f95f9a3f0fbe3d0ac9ef34843", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277781, "uuid": "fdcad3cf-e53b-4378-9677-7dcc0740deff", "comment": "Malware payload", "value": "d2614dbba9aa729ac2ffdcc1c15f0307df4c98fef89f4c0553c1120f7c831720", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277781, "uuid": "8f04ed86-70cb-4f7c-b236-9f6ceabcee1a", "comment": "Malware payload", "value": "75477434ea467c1ae4990ce95f72d4fa1a014310", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708277781, "uuid": "3aa16458-da96-4c13-a724-cee90644041d", "comment": "Malware payload", "value": "85bd5f6b420a5ba07a2cd2d78c8952ef46e1f7f1455e33d320a8b2110759ce6d363d099027d3c6fddabf0778f5987a0c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277781, "uuid": "d2668c4c-265b-4fa8-9977-b206e257c644", "value": "T19CC47AD5F65400F8D0A78E39C8568906E6767C5E0361BADF2394F2671F332E19E3AB12", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277781, "uuid": "2d2654ec-d913-47c2-934a-d63f1e229be8", "value": "e3f3700aa4e91a1472ccab22b35581f5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277781, "uuid": "3742a7bc-f23c-460c-8284-373db4b89da7", "value": "6144:kAeiJVXAP7LFEQ/gkBzfLDuSI7UqvGGxyhQFeZaSV62a1sGJMXsCid9uBWcj:6iPXAnFgIzDrIIqbSlxOj2X0DuI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708277781, "uuid": "ac5509cc-0f89-4da0-9369-30f8b4320dde", "value": 576000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708277781, "uuid": "1003b192-eb4e-464b-b77d-55d5f1ea96c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708277781, "uuid": "d9f64667-8b75-437c-9e7a-47cd66c23361", "value": "launcher.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ce9620c-ce8f-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708282482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708282482, "uuid": "f6036dd9-246e-40d4-a2cb-bf7499fecc06", "comment": "Malware payload", "value": "319167cb720f818b92e1ae6aa41a6427", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708282482, "uuid": "6cd9c707-e3d2-4df2-a930-2aff8e37e46e", "comment": "Malware payload", "value": "d3031268d18f0981f8f4963db699aad171dad0eb1becb78d52fbc9630413917e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708282482, "uuid": "06df8b40-eae2-49d7-9439-7a05bb1e30ff", "comment": "Malware payload", "value": "94453be9a0b79aaadd41705c0ca09003012a63a9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708282482, "uuid": "fc9a4cc0-9315-4923-86ca-f5db6a1bc775", "comment": "Malware payload", "value": "b40619c30b909b6e832b22bb3a5716270b1ccc538c6ef8dc2ffefb50b6706fa68e662a41ab30783bc53984ee441bb6db", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708282482, "uuid": "53fa9b18-a770-4a39-9f0b-993a12ffe142", "value": "T1B4159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708282482, "uuid": "043be8b1-790b-469c-9ffc-fc7b726520d3", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708282482, "uuid": "c43f3415-5e75-4ca1-a37d-fbab9710f993", "value": "12288:gqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaZTr:gqDEvCTbMWu7rQYlBQcBiT6rprG8adr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708282482, "uuid": "5ee02520-e199-4d07-a548-d3c1f28c4a50", "value": 918528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708282482, "uuid": "c979b9a3-6250-49a7-ab6b-4fdff121a2f5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708282482, "uuid": "9e8cd0a3-ef13-4cb2-8c2d-bf62d754d974", "value": "fu.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c532d1e5-ceb0-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RemcosRAT)", "timestamp": 1708296911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708296911, "uuid": "470710bb-4d18-443c-beca-4e27dd46d826", "comment": "Malware payload (RemcosRAT)", "value": "8141224fd2082e4afddd79ede6e40824", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708296911, "uuid": "41c7de61-9165-4221-a8a0-f9f8c9ee87f1", "comment": "Malware payload (RemcosRAT)", "value": "d511a37b2f8d6746f1ac95137e6b62db7a1ffa14e5287c34a6d8eadc63375de6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708296911, "uuid": "287b87b9-dd1f-46e0-9d5b-1a0aec3c54b4", "comment": "Malware payload (RemcosRAT)", "value": "369bfcb976ccdaa8a6c53f61647b770eddbe0ae9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708296911, "uuid": "7ea3f87a-8db9-454d-8780-b576f6d588cc", "comment": "Malware payload (RemcosRAT)", "value": "fa52bcfb19959289de5eaf89322fc38d129ba3a6141e5f5d1e79686bf323b2a8baf669ef3f3baa1230d2fd7dc6bb752b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#F55CA3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708296911, "uuid": "54db9e9c-7fb9-4c18-b46c-a1df9264a33d", "value": "T107B423C6EC20D627E9E3D23529B80EBB8A6BC254C5C43F05630629707E7B653A17F167", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708296911, "uuid": "400c6160-540d-4657-a4d5-a26c1e36dad4", "value": "7ed0d71376e55d58ab36dc7d3ffda898", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708296911, "uuid": "65306a4c-3ea0-4e4e-8030-93328ea31d2f", "value": "6144:JvZTRi81l+eszndWHrZ6N+WXJYNZMsfxxdHM1Sua7/0VgGjwalq4QLLkDBSMSoVz:JRfzccL8N9uMcxv8SuaDggGjwRcdo7H4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708296911, "uuid": "653fadfe-6157-4431-9a4c-559d04159fa1", "value": 508492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708296911, "uuid": "490aefc7-b271-4a1a-b747-64c54575ac73", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708296911, "uuid": "229eb239-6a7d-4549-8bae-6bf289bbcbbb", "value": "D511A37B2F8D6746F1AC95137E6B62DB7A1FFA14E5287.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc4ae117-ceac-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708295232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295232, "uuid": "d1d6b7fe-c06d-40a1-90de-65ebac1a5281", "comment": "Malware payload", "value": "e8e3eb41b70e3c92f5c7cf1d31c9e79b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295232, "uuid": "31731804-5924-4797-b39b-fcb4933fa56f", "comment": "Malware payload", "value": "d6e38f8edfb7665c9f92f886dcccf454813c3bc58ed19d8db5b5d7b9f8b8c5cd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295232, "uuid": "af3ffba2-5b04-4204-8214-c254e0f04a3e", "comment": "Malware payload", "value": "4e5c6da469f7f7516722334a7dba53588f147a6c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295232, "uuid": "b70fb09a-2ed3-49b0-8de5-308753c5e74b", "comment": "Malware payload", "value": "529f2838a9539197025496f859ecb9b13552762d2b19df0491e1e668c16db088825740939b395ca59e2f885fe087f33f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295232, "uuid": "eb50491a-2c5f-46dc-94f3-6af56a6aa53e", "value": "T18F632923EA1AAF46C05765F062F28D700F62FC6A49A71EF6A5A1EDE54043DECF1053B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295232, "uuid": "942c3c52-7f51-41ce-b6c0-0dca5103b51f", "value": "1536:z3daOwtn6h6fLFgxszxKq3UrU65kWC9zG/8:zNBfhwL/zYqG5kWL8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708295232, "uuid": "f868820d-e4b7-4169-8630-3a2c753df8fa", "value": 67776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708295232, "uuid": "ad8e4db6-3c31-4555-bce8-28668e5b1207", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295232, "uuid": "93d71a25-6523-48d4-bfb5-78d15dea6429", "value": "e8e3eb41b70e3c92f5c7cf1d31c9e79b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7f3053c-ce4d-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708254368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708254368, "uuid": "8e4c666f-6c69-41be-b657-fadd59872e0c", "comment": "Malware payload", "value": "f5363e3cfe6aa7fea2ae6597f393a31f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708254368, "uuid": "d2956837-e084-4a55-9807-29afb557aea4", "comment": "Malware payload", "value": "d97565a49d32b9ad7956bbd7f34a66ca710e00642934cca0a78d1323cc2abf62", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708254368, "uuid": "969a0fca-63b1-47d7-83e7-3a642a6bbd2a", "comment": "Malware payload", "value": "07391dd334671a24119f9e8ab3fab88f7fc27004", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708254368, "uuid": "f497c0b1-6949-46f4-887d-d228035823d7", "comment": "Malware payload", "value": "39e5162e64cd25b7d63ad12c09d5d7daacf54bc6472d549393c77a4d1c1a179c2ff2811c74c1ab5a2fd218fe568ea16e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708254368, "uuid": "45dcc2a2-7817-4c37-ba1f-d91053b13e63", "value": "T1507633DD9A9873A1F6419DF0E7283F0E8D2D1CDCE14646C6706838E04A2B7319EB667D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708254368, "uuid": "36b0c7e2-fce8-4118-814b-32c5633816be", "value": "140094f13383e9ae168c4b35b6af3356", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708254368, "uuid": "a7b73958-a96f-4d7e-a60c-6e6f7853156f", "value": "98304:hopS/s7/HojGSK9HGEGwAmDZSQ6wWd3e+5o/zWih1lr1ExNV8Al:CYzEFGg7DZ95WdA/z111WjD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708254368, "uuid": "c5f582e0-5a5b-44f4-9ec9-4f4fecaa899f", "value": 7291904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708254368, "uuid": "2066205b-5bbc-48a6-b6fc-1cde8fb4c2bf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708254368, "uuid": "7f6397b4-57bc-4211-aa24-d34837f48b5f", "value": "22222.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caa49bef-ce8c-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708281458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708281458, "uuid": "7856a374-8dc4-403d-aa62-0d5e87b0b54f", "comment": "Malware payload", "value": "50d8381ce3d4f4b966b6eead26ef2f6d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708281458, "uuid": "af60f7f3-dac7-47a1-9f76-c96c85caf1fc", "comment": "Malware payload", "value": "d980a59c8590580375a5e5ba72c79362b0bcdabe58650b4e50cc74e04caf3f32", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708281458, "uuid": "fa678d3c-d46f-4734-a0a3-5711da99b795", "comment": "Malware payload", "value": "c602f88a932e8cd100f70d46720dc9158443747e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708281458, "uuid": "02f567c8-fccd-4593-aaff-68b757ab8c25", "comment": "Malware payload", "value": "e1104cc54e08949120362fbafcec440b4839989857c0a03b296cd73648217b3f58764bb282e354a78f8c264144765ca4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708281458, "uuid": "a175aa15-f382-49c3-950a-885d8c64c6c8", "value": "T124863396A3A25CF1ECFAC13D8286801AE776717103F0C68F67A582662F132925D3FF51", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708281458, "uuid": "a6d0edf8-cc4e-4f7a-88d6-d4b1b70dc378", "value": "1af6c885af093afc55142c2f1761dbe8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708281458, "uuid": "1415e1d2-11c1-4c43-8752-eb9d03623e36", "value": "196608:Fc8Noe21W903eV4QR24KF5ikWMWKACy9tytPYZxGTK:jNoecW+eGQR2n/ikWMWIaZxGm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708281458, "uuid": "ebcf9cc8-6972-4c6e-8f16-4ce852521d73", "value": 8321743, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708281458, "uuid": "f59997c8-6538-42b1-9f97-48197a720960", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708281458, "uuid": "02b5da4c-ab3b-421b-8693-332c8d42eae6", "value": "SecuriteInfo.com.FileRepMalware.30979.22180", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cd5b5f8-ce4c-11ee-b7ea-42010a9c0006", "comment": "Malware payload (NanoCore)", "timestamp": 1708253706, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253706, "uuid": "7487ca1a-eeb2-4f8b-b903-b440458a5f93", "comment": "Malware payload (NanoCore)", "value": "13de81aba748269ab50fa246c41a4acc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253706, "uuid": "7c20d53c-e56b-4ea2-bc01-07c07c86bd94", "comment": "Malware payload (NanoCore)", "value": "da7842d0d6c33bc7faa51b5a0cb5cbb1d794091b79c4aa020166c2a7bd524b55", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253706, "uuid": "a81c6730-854d-43c6-ac73-1a0b225d42d6", "comment": "Malware payload (NanoCore)", "value": "1c91950737693876cdebdf5c3dc4cae7d2b0766a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708253706, "uuid": "0ab3a531-deb8-4d41-ab66-44992353db36", "comment": "Malware payload (NanoCore)", "value": "fd7993e8e4ef1baec646692a03a20b4410fe92cb7c811e009a1da58094d1b450a532da2deb1087637d7a5dfac199a60c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253706, "uuid": "7daa830c-ee3b-42ff-ac20-003e290946cb", "value": "T16655BE91FA4FC870F0222475C633AAF2A16E6D20FA2489677256BE3EB5F4341515373B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253706, "uuid": "24dd8acd-b4e7-4c3d-bb06-78f936a5d117", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253706, "uuid": "c424249a-9ba8-4054-be74-99256b15a681", "value": "24576:MTbBv5rUl4oF7RJVxEvrQ3AktFyVMTGtR8B/hIdNCXYzJ/N:OBwlJT///tFyVMTGoB/hWP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708253706, "uuid": "4c816539-fd91-4825-bd97-81a4defc0226", "value": 1332225, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708253706, "uuid": "c6784b7f-b570-44e8-834b-0f801e231cd1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708253706, "uuid": "7f69be36-01b3-4856-b160-8ff525d6a19b", "value": "13de81aba748269ab50fa246c41a4acc.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "137e1efc-cea2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708290600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708290600, "uuid": "3a86767e-497b-480d-9118-92b497f3c88b", "comment": "Malware payload", "value": "731812403191b60503e017d88e23b1a3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MilleniumRAT", "colour": "#A7A47A", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708290600, "uuid": "d0cc7d73-a871-407a-aea6-68b612cdda86", "comment": "Malware payload", "value": "db874ae685d2bc4235b1213ec9d43d327c8d2bd12300bb0d78c9ce0a84c828b2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MilleniumRAT", "colour": "#A7A47A", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708290600, "uuid": "cf602dc1-1c0b-43a6-b025-5f8de8f7dca3", "comment": "Malware payload", "value": "67e1c24ded75620181916dea9654eeddf4049525", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MilleniumRAT", "colour": "#A7A47A", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708290600, "uuid": "e8dad830-e942-4cd7-8449-096fd1ef64d6", "comment": "Malware payload", "value": "5b48454d2c5080898dee3cfc336908f04534f5b845c13ad1cdc9541f9fe49ef6b5b5cc94ad62bcc3c68d763fb8a132db", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MilleniumRAT", "colour": "#A7A47A", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708290600, "uuid": "2fcffcfb-c7d9-4132-9506-cb26caa5adbd", "value": "T1B646F116F6D500D8E9E7417882BB6B67EA7070011320ABDB53D049B96F23BD27A7F319", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708290600, "uuid": "cfe6693f-8542-490d-bed7-0ff902b3b5cf", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708290600, "uuid": "c6a3629b-a553-45c4-b946-8a7ffb77f400", "value": "98304:nsl27OuKr+gvhf2U9Nzm31PMoslkqXf0FvUcwti78OqJ7TPBvc8X6UcR6m:nPOuK6mn9NzgMoYkSIvUcwti7TQlvciK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708290600, "uuid": "5321eef0-1fdc-4e72-8feb-c0d4c688a6cf", "value": 5872345, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708290600, "uuid": "2395314d-66fb-4c83-8bea-4c5df1ab6267", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708290600, "uuid": "1ec2910d-28cb-4422-9539-3151be166379", "value": "conhost.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5f144c0-ceb4-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708298576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298576, "uuid": "a1c990ef-e607-4754-ae21-e06d940d1247", "comment": "Malware payload", "value": "e844beafff0bf32c5cdb729f2ca56b58", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298576, "uuid": "1c446cfd-3b0b-4f8a-9f9f-194546806403", "comment": "Malware payload", "value": "dc999b22e65fa856fe71cafbea319131d1aac3273a109e4f653e19bcd246db17", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298576, "uuid": "1e5b38e6-0afc-46af-89ea-743df17d69a0", "comment": "Malware payload", "value": "60b160a77fdde6f0de349f04a60424b59dd943f4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298576, "uuid": "394f1a1e-0e86-4083-9af4-40f2bd01001c", "comment": "Malware payload", "value": "6471ffedb87c501e9146912c2b95e9cee88e579e50e3b19670d3b613332be05cd5f356390a616227346823ea272a2e88", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298576, "uuid": "73460c0f-557e-422f-853e-29eb728eb986", "value": "T174B48D3B3DF6E064D15295B6FE24E762225DFA341932D587A9E02DCE77232D14A38E03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298576, "uuid": "f7848c41-cd2a-4d78-8c8c-315dd5ef0a64", "value": "6144:2yvLMtgFgbBTMNC5b2MQDhl5FQxeBZGpEtjMF4jJO7vmoqpSe7V:28MtgKleybgbWevGpEtjMSGvmo9e7V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708298576, "uuid": "6f155763-9abc-4c58-be4d-0eabc29906e9", "value": 503808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708298576, "uuid": "60da5b64-c11f-4636-848c-efe98ff95c40", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298576, "uuid": "5e4a7d06-14a0-4945-8f91-f5048c3fda49", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.18430.29180", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f2307b1-cea6-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292364, "uuid": "baebe95e-971b-4a16-8a8b-a24d65f15407", "comment": "Malware payload", "value": "572e55a2354b4a95fd00b67a1dfd23de", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292364, "uuid": "9f7f3bb3-bd4b-4787-b8d2-29bf646edcb1", "comment": "Malware payload", "value": "dd3446b06d55cd6e07253e6c5d23a57910be19e8254f492240e01edf9e0756bf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292364, "uuid": "86fd2844-4e8d-40df-a89c-39b8c8fd2eb2", "comment": "Malware payload", "value": "a705c77d8f4a82e0805452e3be11a67e2e1231a4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292364, "uuid": "c68c3d7a-4d41-4ffd-bfdf-25be35067284", "comment": "Malware payload", "value": "d0d0dc49314a8eb39be36c7799a116ae4eec0307b6a9b8c0cd95b93e184569a5f2a697301d91a4bc06a9c346c49e1de0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292364, "uuid": "854d0005-72c1-41b2-a241-863da6f7b6ed", "value": "T197A4BFA4BCBCF028CF3289F655237F180A2D40BB8D73A507587815EB5974F916B63B29", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292364, "uuid": "ae18aa39-86b3-47b3-951f-40906d33fe4f", "value": "b77b99c3883f50fc5eeab54139139034", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292364, "uuid": "7a3576c2-bc0f-4afb-a193-32c82e072dce", "value": "6144:YHjtA89CVHi7dpof5TnUIvpjWMv1fRNOijmrOlepwyL477JYNh1/bUwt0s:YHjtA8kVUIlWYRfHl+nh4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292364, "uuid": "5f7cf3b3-71e1-49a8-9824-fa3fde64b89c", "value": 469504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292364, "uuid": "bac5c20d-3b79-4d74-9bf0-83bd86f7e2b4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292364, "uuid": "30498183-b090-4410-8fc3-34aaa0f4f719", "value": "572e55a2354b4a95fd00b67a1dfd23de", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a68ed452-ceb4-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708298577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298577, "uuid": "e17ff00a-b41e-41c0-9e59-543165efdaac", "comment": "Malware payload", "value": "28c7df3385587d1a8b8852e212ccce0e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298577, "uuid": "4fed75d0-ab64-4021-818c-9421e6a5ea3b", "comment": "Malware payload", "value": "df9e9b90cfb0255581783fc02acf972577160faa6dc3d7ae5bab94b496940825", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298577, "uuid": "12d84f08-900c-471c-9d43-edbdb7735960", "comment": "Malware payload", "value": "1e85f6af39aefa3da420f85adecb06492850fefd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298577, "uuid": "d3148a2b-c574-4440-8623-090e2fd1cf6d", "comment": "Malware payload", "value": "79faf9a55dfd052120d4e8d1c17931d45e886c2912adedf1cfbf3b70d5bc976b4acfd6655ffb8d871c74c6f9f0692b3d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298577, "uuid": "1e212414-6b49-43c5-ba6e-9b2825160626", "value": "T1DF84BDF8D3C90875C45C01F66E2AB33EB6DE5CA0B59581627F4B24437A725EBC128EC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298577, "uuid": "cdece770-907b-41b9-82cb-465856b1d864", "value": "3072:kB2JXlTm+oQiVgmzLECzKosGm3ay7m5MdDxxHYYKe:kB2R5HfosGHyLDPY2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708298577, "uuid": "624ac72d-454b-47be-88d7-b71f9dfb682a", "value": 377344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708298577, "uuid": "c7bb71d5-3eea-43a7-89d8-5910b57571c0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298577, "uuid": "d1c7b788-1735-47fb-af1e-a50cfda4a816", "value": "SecuriteInfo.com.W32.S-909ca299.Eldorado.2466.20230", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31c11722-ce2f-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1708241258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708241258, "uuid": "47aad024-bf7c-4887-b731-56853d972529", "comment": "Malware payload (RiseProStealer)", "value": "e51a2b1859c4cfd00e7172e24ad39467", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708241258, "uuid": "f0e349ef-2508-437f-9bc1-d0cb4f5790d8", "comment": "Malware payload (RiseProStealer)", "value": "dfb2023f2442a4eb6c97401b8cb2adf08a217c2e57f08d10070a5af3f6197d28", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708241258, "uuid": "7659a0e7-9687-44ee-ad8b-1b949abeab47", "comment": "Malware payload (RiseProStealer)", "value": "b43e314fafc1e41ca4cc5b440ddf79e34e8c8107", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708241258, "uuid": "3ddc1e13-171a-4ee3-b637-46d2accb73f2", "comment": "Malware payload (RiseProStealer)", "value": "6229a7a8dcd70c598de98585f76d9ad0a9ec93eb455a267593543efdc075faeec0ec0226f6ff98eb94d6156c034073b6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708241258, "uuid": "d0887e37-897e-4cd6-868b-5e3d1f0081ff", "value": "T14E1512CD6D804463D6847B7848C3FB7D012EED91BED490D96CE9BF57BA32E28192252C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708241258, "uuid": "f87e3da9-aa31-4f80-8176-fd8fb8b49ea1", "value": "2388fee6ad8ce4f4a35dbaf64e2da01a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708241258, "uuid": "10655d07-1d61-4641-8f31-6dd2509f3e7f", "value": "24576:FzUeyxs/GOmkrxcOGFH1L8a0IkGbT+Vk:FoQGOZxgWhGX+V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708241258, "uuid": "dce80bf4-d9d2-44df-bcdd-095fe624d1ae", "value": 921904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708241258, "uuid": "4b598d7b-8ab9-467c-9b3e-050772c8db28", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708241258, "uuid": "0471cd78-2c57-4ceb-913c-cc2ce29f0a17", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105649.26510.19959", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6c60996-ce5a-11ee-b7ea-42010a9c0006", "comment": "Malware payload (AgentTesla)", "timestamp": 1708260057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708260057, "uuid": "8b1892b5-3824-4894-a1fb-24d9888aa296", "comment": "Malware payload (AgentTesla)", "value": "0ba1c018dddddef8b70ff4dbdbded216", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708260057, "uuid": "bcd49017-ca3e-4e9d-bf44-858ee267af04", "comment": "Malware payload (AgentTesla)", "value": "dfbdfe726d8f2a4abd2fd89a00b71e69f1e5e5340ce354ed58f741044399b721", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708260057, "uuid": "45126d6d-b2f3-49f9-ad89-a08d6f6a5b97", "comment": "Malware payload (AgentTesla)", "value": "491281686909dbee89c43e74c0c9e4410224f87c", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708260057, "uuid": "8238a504-51dc-405b-9ebc-dcb4d41f321d", "comment": "Malware payload (AgentTesla)", "value": "c3f57e99130489928bc3189a6cb7b399a289b2c9afb0ccc31a8b67d4234e0d28ea6e209f2d9230937c07615b6ea19302", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708260057, "uuid": "c1e552d8-04f1-461b-b3ef-7f60aca2a625", "value": "T17EA423C138DF2CCB1DE5A781802DACF0C16475AEC1854BD05EAEC27DDB392A1BE45A97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708260057, "uuid": "0b569dea-7545-42fa-81f5-e9871f456554", "value": "12288:HLgjJeN6XeE/lVj4jObvQD+17fNT86jt/AdTa:HueN6N/lgy7IGAdTa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708260057, "uuid": "105ac34f-691e-4fb4-9ca9-e379bbc11c34", "value": 484528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708260057, "uuid": "fa4cfd03-4689-48ec-a176-177e27871703", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708260057, "uuid": "fc7719ad-d108-452b-b017-78e4ee311a98", "value": "708e198608b5b463224c3fb77fcf708b845d0c7b5dbc6e9cab9e185c489be089.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74e614a6-cea5-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708292052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292052, "uuid": "f97d6cb5-68e6-4bd5-96b7-f634de33a524", "comment": "Malware payload", "value": "66a281f5c4841383f406c6c953f99975", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292052, "uuid": "9db12aa5-44c1-46cc-bb13-30e51b3bfada", "comment": "Malware payload", "value": "dfdfadcf7a83d20183448b605ab84786aa65394beb3b15ee0a83e4d38c9ccde9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292052, "uuid": "14a160cf-876e-4f6a-8c17-a3ef5f43f60c", "comment": "Malware payload", "value": "061ab26596d12efcad1ec93815237eafa012aa6b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708292052, "uuid": "1537f093-7273-421b-8a77-4891489cbf2c", "comment": "Malware payload", "value": "69038469368d12a4671085ee2053a8671fb86264f353ed8a8981a616f9838a1c85c4a544437da0a41811f426b0380acc", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292052, "uuid": "f0d8754d-b2b0-4334-82ce-af2bfe645750", "value": "T176D64A30C250DB16F2B395B44529974978582B241B3C15E719E4FCA93BF40E2ABBDE3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292052, "uuid": "aa55be37-4132-48eb-b835-0205e797abd0", "value": "26ed6ddb3620f031d19001cb6df6f58c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292052, "uuid": "aac4936e-df70-4f79-97b3-98b4c4d59d09", "value": "49152:6FK021v7V3FEPLQ8Z7El6y4Gh0KooN7gvOg7ttXp22Zp22X222Hp2222ppBUuVkH:6F5avx3FruYrh5ooHL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708292052, "uuid": "7a73e737-e559-4f12-b7af-97eb70b97ecc", "value": 12910080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708292052, "uuid": "04fa4e2d-7cda-4579-bd67-5486c0000c0b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708292052, "uuid": "0b101c1e-77c7-48d4-acf2-d9a5a7f23888", "value": "SecuriteInfo.com.Win32.BankerX-gen.25307.16776", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0aab057a-ce85-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708278130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278130, "uuid": "1029f50a-be9b-4985-bedb-df4c3d907ec7", "comment": "Malware payload", "value": "1d89bb27ef47c0b20d7d3738c72b7585", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278130, "uuid": "2e681eae-1ea0-403e-b35f-b97ffee280cb", "comment": "Malware payload", "value": "e0d25e982293a424a36c37dd778100785d24e24a0318e2111b2991c3a1ace120", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278130, "uuid": "54dac349-6f42-40fd-a9b5-c0abe3382c4d", "comment": "Malware payload", "value": "db99aa51411357ee323c27c5889df35353820341", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278130, "uuid": "3dbac1f2-b65d-4640-af7d-b068f2cc4fe0", "comment": "Malware payload", "value": "e2c31b6f9e193154d27efbcc56e6537bdd18e49a51bce33523eb1c1e0a49665cbd0ef7eb6df5407dc5b8f33b63e24eec", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278130, "uuid": "8e60ba80-082d-41bd-bc3a-404c32234476", "value": "T17644280373288D77C7AE4770476E43A1FE79911906B6CB3C047AE7B4299527392607BB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278130, "uuid": "52398929-5483-467b-a2c3-6ceee60a79d6", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278130, "uuid": "2bcbf3ec-4abf-4789-b26f-23bb8b9eeea5", "value": "1536:Ya+XUOlv4HjcDPEUrSUtD272tfiH149DPEUr0JDPE7r+:Ya+EGgHgDswtaru9DsrJDse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278130, "uuid": "067f59b5-ba13-4089-8fea-05f3340dec2d", "value": 258560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278130, "uuid": "e0491549-9bae-4cf7-91d7-2dd199e320f9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278130, "uuid": "f9fa7449-e339-4ee6-be28-2bb13e7c7795", "value": "smi_gui.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8c82389-ce84-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708278099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278099, "uuid": "1c1fbbc9-4a01-4b1c-af78-ca42f26a6fc2", "comment": "Malware payload (Mirai)", "value": "cf953117ecf53bafd39c1ba4e3d71a7b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278099, "uuid": "6788a0fb-d2bf-48d9-96ee-940065c7d777", "comment": "Malware payload (Mirai)", "value": "e119df659c50e3a685b98b8c5b99f6e819df737dccacc97cc8839c5b8dad056a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278099, "uuid": "c62daf3c-8578-408f-a7ff-446fbc328ecb", "comment": "Malware payload (Mirai)", "value": "72a1e2d71ba3e753015be493380c2177dee5a946", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708278099, "uuid": "a0298219-b0d6-4618-a424-9e1f76303877", "comment": "Malware payload (Mirai)", "value": "670a9c895cfe9406cecc3f97a21f36acdcff0bfc690c2a72c516456b5529f71be6f6f509373eabe7653eb34c654f6767", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278099, "uuid": "9fdb332d-24f9-41a8-9f89-5d3d915522af", "value": "T1E983630E3E215F7DFFAC823987B74A21665933EA22E1C5C4D19CE9061E7034A641FBA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278099, "uuid": "7ea7decc-19f2-47ae-9c1d-d69eb15f7c0c", "value": "1536:im2yFrszc6u0vTJ2VdKXrE1nHkiRZKyLXPjQjc:IyFrau07cVSE1nHkiRZKyL/jQc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708278099, "uuid": "5fcb2d73-b304-459a-9097-5674b9f785a1", "value": 84120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708278099, "uuid": "a130d174-8e2f-4a58-889f-cb70ca0f603e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708278099, "uuid": "28d89e14-6460-4ce7-9f3e-8f48a5c54487", "value": "cf953117ecf53bafd39c1ba4e3d71a7b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e9501d7-ceb8-11ee-b7ea-42010a9c0006", "comment": "Malware payload (IRATA)", "timestamp": 1708300067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708300067, "uuid": "03b9ece3-0f99-4f08-ba1e-ae797a0fd927", "comment": "Malware payload (IRATA)", "value": "feaf74b0a0f21dcbc00a2d5005bafa45", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708300067, "uuid": "ac611e0f-5087-4e61-bf4f-419ea64430b7", "comment": "Malware payload (IRATA)", "value": "e1582cf9add97c8251279476292ffe8c563149b3fa842f5116ce9c6e0b287444", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708300067, "uuid": "829f2302-f620-4d9c-8bcb-c014c55fe970", "comment": "Malware payload (IRATA)", "value": "b35b8b14dc2cb956576108f9746c7f9ffc866980", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708300067, "uuid": "39f29af1-739f-4eb4-8f5d-48de48adfc54", "comment": "Malware payload (IRATA)", "value": "6526efec1ba25a19712b7bef07542fd2ee66faedf6f94b8d629669dbd36e3d045b648b5df71d69d50b07cf543ae4a370", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708300067, "uuid": "3e8a7782-cd94-477f-9722-82973d2ae25e", "value": "T15F162313F6B69917C5F6C37222252A3940770E25C743B64A35087BF928FBEEC0B856E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708300067, "uuid": "86e110c7-b030-47e8-b0d1-027c073fe6c6", "value": "98304:zGZTSHh5MkkmXYPsWOx9zMsOhl5Z5IpOyfmQY0Gitk+HWoCz:zGZTSHMaoUFPgsOhl5Z2pOyW0GitnHW/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708300067, "uuid": "e27b9d04-c58b-44d4-af7a-f52d4049c233", "value": 4039069, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708300067, "uuid": "a44b03e5-aec7-4a5c-b835-1b52d76d019c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708300067, "uuid": "14d7c68d-2044-4b5c-9846-662a675ca28d", "value": "KissLand.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a39726aa-ce3b-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708246603, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246603, "uuid": "a86eecbf-c120-471b-a19b-f36041093253", "comment": "Malware payload (Mirai)", "value": "75181a6e645ba1c9c7cb86bc9796dd9f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246603, "uuid": "03ce5d62-c0cd-4bc3-abad-b082c4c77a9d", "comment": "Malware payload (Mirai)", "value": "e1ee75e7bec17fa0bc920331e529e2bc356d087110c3bc6d22317e12fbcc470e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246603, "uuid": "4a1f8300-627c-44b9-8d04-38e2a049b5e0", "comment": "Malware payload (Mirai)", "value": "865e19adeb9c66a9a7c84aa26cb87d93064cc219", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246603, "uuid": "45ec9e51-93cf-4124-a92e-4be2aaf57fc2", "comment": "Malware payload (Mirai)", "value": "cb9ac18c311729e77b56ba5502e6014398ea5e430f4ee002907417978bab6ced1cfc24d41c2320447b26e1b348a96cdf", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246603, "uuid": "cd5dc809-08de-42c9-b723-1041fafa2971", "value": "T1C983D80D7E21DF7DFBAD823487B78E219A5833D626D1C581D1ACEA005E7064E241FFA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246603, "uuid": "c61760ff-016d-4adb-aa44-c38de221be49", "value": "1536:YJcFgZRC592Xogr5Otm5rVQWQ1RDOBQjw8Q4EqJa10Wd:uc0CfEoc3QWQ1RDuQjw8QTq4D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708246603, "uuid": "d9c9a863-127a-48da-a0aa-54aa8f5f0852", "value": 85636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708246603, "uuid": "d564b0bf-d2ee-4973-9d20-baced14cd6c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246603, "uuid": "b9bd0d38-549d-4f55-9087-74c512bf1721", "value": "75181a6e645ba1c9c7cb86bc9796dd9f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c41f20b-ce74-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708270938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708270938, "uuid": "42f3e21d-fce8-4b79-915c-7606fb816563", "comment": "Malware payload", "value": "182f612479cdfbc919b25c22ec08d8c1", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708270938, "uuid": "bc01ff3d-0ea9-44d9-abe7-e56050eb56ef", "comment": "Malware payload", "value": "e257e558a5451f46a6bce153481bacd6b7132904400a219063f12830b80f17ed", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708270938, "uuid": "ec592b34-0a2b-4a89-b85c-8499f8f4abcd", "comment": "Malware payload", "value": "b0c05033311433401114f0a620079d70262ecbc7", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708270938, "uuid": "0db7b030-abe9-4a5c-8641-1825c942ec0f", "comment": "Malware payload", "value": "3962dd0c8e10ed54592995508264fcc1f9aabcc326de0f616ed4c38b21e643c4e5efea23ac623e9adf1e56ef8dbd61cb", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708270938, "uuid": "e64f7689-a26f-47ac-9490-4e5be6a93e9b", "value": "T1CB271293E32DB86AD4B792358A782367815A4C904B47EBD37D05B63E59F39C08B49FC0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708270938, "uuid": "f44d0360-3b02-4bfb-bfdb-8d66d8bc89c0", "value": "393216:QPSMyHi9WUErze3BVbd+DI57MSU6PdFYCiH1nfOSwGI8Xr+arUcm8LVxj:QPSvhrPoVbd+s7MSU6P/YCM1nfls8XrJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708270938, "uuid": "eff43db2-d26c-4462-a23b-664542097f86", "value": 20579735, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708270938, "uuid": "6baa0231-1e20-4442-8639-bc7aed48e9f6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708270938, "uuid": "6def4364-fe08-4045-aa25-a04614a788f5", "value": "Neon Keyboard_1.2.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e305d987-ce99-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708287082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287082, "uuid": "63ffdbbf-cb42-484d-8d4b-f54d4d8719bd", "comment": "Malware payload", "value": "66275950723559be71a414e0b568ef17", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287082, "uuid": "a7fd8d4f-2b18-444e-ab07-5d4b72f15447", "comment": "Malware payload", "value": "e51c61a8706dd4485369de52f9069535fff522767d22bb0ea4d502984dae25dd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287082, "uuid": "0f5258b9-bbe5-4922-8c85-7afe994dfc9a", "comment": "Malware payload", "value": "4653309367c14210731fd971a730d35929fe729b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708287082, "uuid": "5d0be827-a7b8-419b-8a2e-54752bed8648", "comment": "Malware payload", "value": "cb273d0daa72a4da75f53b99104f8b94141c165f1f928be9e83cb72e8efe190f5fe004c2294d0f5088d4acca95c904f3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287082, "uuid": "f93ece55-1d3a-4114-ba20-6af06e65d377", "value": "T1DAD733B89BD96DCCE46B7133B180C64DDC82701E6A66856B57F002742E9F3EA2BFD111", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287082, "uuid": "8bde4571-a7eb-4ab5-a02f-59186ce6c71b", "value": "0b5552dccd9d0a834cea55c0c8fc05be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287082, "uuid": "c817968a-8d00-43ef-9aaf-138436c3a62c", "value": "1572864:cn9FP/V4f6Gj53ikjt4jRqtGqFOPV5dG1hhv+0kSrwe:A9t/VG6RmtCRgGPrdG1hhmOwe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708287082, "uuid": "0f084343-4060-4d0c-8e5a-59668b03ceba", "value": 62731110, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708287082, "uuid": "72037c0a-f8ca-46b6-a148-54899023ac84", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708287082, "uuid": "c3f18ae4-abfa-4096-bf73-8f026a4c605b", "value": "dio.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b5319b0-ce02-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708221974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708221974, "uuid": "00f2fb9f-79c0-444c-b0f4-5253a2c85b48", "comment": "Malware payload", "value": "36ab7920eea7129b9f1f1df290dbf054", "object_relation": "md5", "Tag": [ { "name": "Mekotio", "colour": "#6237B2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708221974, "uuid": "898f23a5-8190-4e32-8bde-0346b801ca27", "comment": "Malware payload", "value": "e610a44a7ef25a34e2623ec427b6c1c4361d9cc3a4c947b298ccb93e118bb26e", "object_relation": "sha256", "Tag": [ { "name": "Mekotio", "colour": "#6237B2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708221974, "uuid": "5475cc76-38a6-4a2f-9388-89e4418fe93f", "comment": "Malware payload", "value": "46d58e77154a448669c783dbc1db83442cfe2e53", "object_relation": "sha1", "Tag": [ { "name": "Mekotio", "colour": "#6237B2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708221974, "uuid": "087c8709-c780-403c-97be-acb3c252af94", "comment": "Malware payload", "value": "4592292f1e725300c78f1279acf0fd402bb62f43d0c8665d4449d4c9c27c7e759bed33039fdcbaa6238befeb8f375857", "object_relation": "sha3-384", "Tag": [ { "name": "Mekotio", "colour": "#6237B2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708221974, "uuid": "2f33ac7f-22c6-420f-8de8-ef1063990c46", "value": "T196D633A42BEABD434C29E6D1C5E20DD9C739BC81EAB176DBC599F032EA7118C0934177", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708221974, "uuid": "00ffd357-a692-424d-a265-6181556ed56f", "value": "393216:A25V9+C5o4W2ryHDm07BpJkx6q9uwcOcQc3A5G/VXar:Xd+Qo4OmcpZJOcoGtU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708221974, "uuid": "0fe780d5-23dc-47e1-93e3-6c38096be3b8", "value": 12900603, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708221974, "uuid": "67e31f1c-8086-496e-baca-531616c97910", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708221974, "uuid": "3ca931fb-b323-4549-b414-43de2b406b6b", "value": "nuevacitacionpoderjudicialcl.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b80bb6c2-ce69-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708266394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266394, "uuid": "b450a6e3-1fd5-4e9e-9cc5-42e18d8d80d8", "comment": "Malware payload", "value": "2c222e37b82d8adbcccb1987bac8d5d5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266394, "uuid": "93fa4bc3-930a-4189-bb1d-bdd3cca3a8f2", "comment": "Malware payload", "value": "e84821e2410d077fa306d890980f144ea64995e1c0efe13c49e7054c8f3c4f64", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266394, "uuid": "b84b84d8-d19d-4e33-9340-2c02f2843c45", "comment": "Malware payload", "value": "f4938a9b6434c22e0bb452cd598b5dc232896ac4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708266394, "uuid": "3fb0eb7e-3e76-4844-bb3b-b156478279a8", "comment": "Malware payload", "value": "b122597d0956f60e744f9a0af78b32d199000e572de10cab960581e9c108cd2e0cbcce0ba16ed206646ac862ef097038", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266394, "uuid": "a9b99fb7-45a5-4d8a-839f-bbc70d6a25e2", "value": "T14EA4AE67BA810031DDDEC1B592A606B26F2BE4F9037E28E3FE591790C6514F05BBA7C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266394, "uuid": "64068d7d-8712-41a2-90b3-b9386db69121", "value": "3072:2HK84CU2ghmMy42IOeGNUBpvjrYutdD+mO3te:JotghPxlIUB9Ip", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708266394, "uuid": "5bbdb75e-3dcb-40d8-ac14-a1112e3650e7", "value": 454656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708266394, "uuid": "e69e695c-d1c0-445d-85aa-958917444793", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708266394, "uuid": "51ad295c-14b2-4cdb-9e53-e9c12682f5c5", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.17477.26088", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5b005e4-ceb4-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RedLineStealer)", "timestamp": 1708298710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298710, "uuid": "0f891503-d550-4ef7-81e6-e7ff976118f6", "comment": "Malware payload (RedLineStealer)", "value": "0218a6e9bf2d89920d0b259187009ee9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298710, "uuid": "1355d77b-fdbe-48f3-bd09-dea82952c9cd", "comment": "Malware payload (RedLineStealer)", "value": "e8b9cbe943b030010dc976ca280bd3168842fb7a002e268fddcec137fede1be1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298710, "uuid": "529f1e8f-3eb3-49fe-bfcf-7b759414e0ce", "comment": "Malware payload (RedLineStealer)", "value": "21fddda558c7560fbed27d57bc5a1fc0b10d304b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708298710, "uuid": "b44dd766-9c39-4a06-a5d5-e102e0062ec5", "comment": "Malware payload (RedLineStealer)", "value": "3c7ee524a4caff9859e9706ff0a27e5e35cb562664c6c0b1864f02a91a0b5e5f77a030e029dc65ce311f50054644fa49", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298710, "uuid": "6473265f-d8bd-41e2-98df-5be9c15f8979", "value": "T11FA429D0EB99B603F22957F45470F5736F249D6EAC03A206E9D47C673D6AE00A202F67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298710, "uuid": "53bfc3e4-afff-4578-bec5-3924d99258af", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298710, "uuid": "69afb022-ea84-47b7-95ff-e3d04991dd89", "value": "3072:HA0tnblO9c+OzM52LsbfbujzJ8KFnyMxs589kIMRqfjDv/YiBihA1NbBOS:bauzxLsbfS5jx48hMRqfjD4iBih+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708298710, "uuid": "f7c962a5-c02c-4ed3-833c-5c52e3f7ab61", "value": 484864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708298710, "uuid": "41c98912-4065-4c6e-8e87-0dc608277885", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708298710, "uuid": "7892953e-ea9f-4457-bb3c-c327dd6e1685", "value": "0218a6e9bf2d89920d0b259187009ee9.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "301fdda7-ce4e-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708254570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708254570, "uuid": "5ca17bfa-f5d2-4854-af01-c838eb975118", "comment": "Malware payload", "value": "2168ff4bef941ea557d9d3987d127809", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708254570, "uuid": "21bda8cd-8e14-4716-8d42-6592c3fc2cd9", "comment": "Malware payload", "value": "e93189dbbed09b9192062778649cf8145304121174b373faefdd3eaf77ad886c", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708254570, "uuid": "444dcb23-2002-43b7-b0db-4fa8e329059f", "comment": "Malware payload", "value": "fd546c68dba08463e048cb56777718d615451af7", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708254570, "uuid": "c4144ad0-524e-4e7c-9c86-44c4100139dd", "comment": "Malware payload", "value": "b5fc3a58ff19cf5ea6acbae8d3010e83c469316d7277e740144b8e900a43db9fa7bf1755d70c84250c67160e67206668", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708254570, "uuid": "0cc99c61-3c9a-4117-90ca-1e488e5e2bed", "value": "T1E1235C4037D88136F2BD8BB4ADF2D5458679E2672903CA5D6CC814EA1F13BC596036FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708254570, "uuid": "01176128-6900-4f20-b1a4-ff010b025dd9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708254570, "uuid": "4611cc59-8199-48ac-8275-62e9e70744a8", "value": "768:dOEuILWCKi+DiBtelDSN+iV08YbygeiXJxvEgK/J9lZVc6KN:dOtmBtKDs4zb1DJxnkJ3ZVclN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708254570, "uuid": "58c8359c-3126-414a-bc93-d6b76ac5e00d", "value": 48640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708254570, "uuid": "1233d53f-123b-4328-abb3-f33508d3fd7f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708254570, "uuid": "e23b1c3f-2c87-4ac1-bfbe-af78ef04438e", "value": "Client.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce329f46-ceac-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1708295208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295208, "uuid": "e0b49b41-7d70-49b2-8feb-e88d47fbd39e", "comment": "Malware payload", "value": "e5409ee931e29ffc035bf8802a141084", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295208, "uuid": "159456b5-8ab5-4968-b3cb-855335e54a21", "comment": "Malware payload", "value": "ec8201f3323c5996a021e2abd0310dccd5ce90059cb6ee4c4af2b56bd326e731", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295208, "uuid": "ba1030f4-60dd-4ac9-a713-aa044a8cd317", "comment": "Malware payload", "value": "ce5d9cbe2ce5c217d55472240afb05a21d6ea69e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295208, "uuid": "62b36675-61a3-457e-b438-7608ede26c16", "comment": "Malware payload", "value": "7c3078df33254a4b4aaaaf2c01601a535e43c56122db3e3ae92b601bc338b223c478d86e3972e1b902240c0bbde7a659", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295208, "uuid": "5abc6ca8-47df-4a31-b19f-525bbeaaaaa0", "value": "T134A3D706BF514FB7D86BDC7706FA0B1128CCB81B25A92B76B534EC58B20A2CB15D3974", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295208, "uuid": "21799c34-ee61-4af9-bacf-c885f84cc24c", "value": "1536:nR8r9obMb1xSK0AqVNvBOUUiMx7CBSkHC3eANKlDZQYr8N4eAe7ZiA:nRG9obMb1xb0AqVi3eLDhje7V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708295208, "uuid": "ef2652ca-992d-4072-bdea-a07aafd3e1d7", "value": 101044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708295208, "uuid": "9aa0843c-db12-494d-8903-d9ca1931eaf1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295208, "uuid": "2fcb3c06-830e-4aea-bd9d-f4a1a1ac6c06", "value": "e5409ee931e29ffc035bf8802a141084", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49af2c7d-ce56-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708258049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258049, "uuid": "0e358197-412d-436a-a9e2-6173ca3bde05", "comment": "Malware payload (Mirai)", "value": "7332cb8cb4ae8bdbddc3d7d361d90c34", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258049, "uuid": "e1434513-eee2-4f22-bb55-7d70251ebd43", "comment": "Malware payload (Mirai)", "value": "f20530cc79b9f701bad1e592e333c0597df41928bb595fb35ef6605b3741a4c3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258049, "uuid": "b94f0942-5fdc-484e-80de-72cc4f1284c4", "comment": "Malware payload (Mirai)", "value": "938545e969affcac2a25e51fae6ca10ba583556d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708258049, "uuid": "aeba7b80-d020-40bd-9e2d-5ce01de23b3e", "comment": "Malware payload (Mirai)", "value": "343f909010d429898e430eb60a5f7b3c8a4ea3ee368df0f2215ee6d9eb122a84d474d16a5579c9c13d3eeb4cf9b854ea", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258049, "uuid": "6d30671d-cc47-4acd-a78f-14d1c2c58ac2", "value": "T17173A71E7E258FEDF799823447B78E216A5823C637E1D2C5D29CD6012E6024E241FFE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258049, "uuid": "5d7f810b-a611-4f8a-9d18-4e76eccaf3f5", "value": "1536:uztcPRFA6olzsswzNBOY1n9lzU8ujBGuMbobADwbFa10J:uC8nw5BOYdmjBGu8DU8u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708258049, "uuid": "a2695e8b-bb1d-432c-8b5d-52bf5b499d67", "value": 73596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708258049, "uuid": "4a2ba6af-36dd-4265-bec8-e77dbdffa2bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708258049, "uuid": "87058816-6667-4d3a-9dfe-5e6d11f1492f", "value": "7332cb8cb4ae8bdbddc3d7d361d90c34", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a9cb916-ce08-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708224603, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224603, "uuid": "f592d2f8-9fb5-466f-be71-c2d27058b8f0", "comment": "Malware payload (Mirai)", "value": "e1b2d8abe076b0e10ff12ce78a4cbf1b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224603, "uuid": "9061474f-b31d-49f2-8908-c1a32389f8d4", "comment": "Malware payload (Mirai)", "value": "f3086bf7adca0e4e0918897323f84337daa64e56c62052fd6633c87df52387ef", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224603, "uuid": "dbdd6e16-b072-46fe-a1f8-1b31bbc0c250", "comment": "Malware payload (Mirai)", "value": "3d3ff2df58abf8fa997544d1799446e871b753ee", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708224603, "uuid": "bdac0319-ad58-40c5-8a76-6067d667346a", "comment": "Malware payload (Mirai)", "value": "d357321bc5721e7dcfae0d9e56b02513c6fc254b72aab2141b135879e318239b05bd18b92a59576e387bb74940e86067", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708224603, "uuid": "620d6130-0730-4f96-a9c7-1a27155c88d1", "value": "T1823302118B88BC30A1724C376E243592B21D7DB659F930277B8A950456EAC83E7F4FCE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708224603, "uuid": "ecf2fe88-b7d2-4078-bc88-a26c11c93e7d", "value": "1536:ST9hMPJZ5SDQjywD3YacJ9q8pLjLrTtPC1:2s35SD2ca69q0LP1+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708224603, "uuid": "cee84178-c251-4180-ba7e-87447bad9bec", "value": 52500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708224603, "uuid": "d95e3d29-f602-4bff-b590-533d7183878f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708224603, "uuid": "bcb7359c-207c-4829-b424-4ab6cb505891", "value": "sora.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91cb8473-ce2c-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708240131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708240131, "uuid": "25eb5dfb-837c-4cff-8425-1f4fb7d83ab6", "comment": "Malware payload (Mirai)", "value": "960d399d9c616e4593d80437244f16a9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708240131, "uuid": "353e449d-17dd-4436-814e-5db063acf037", "comment": "Malware payload (Mirai)", "value": "f3156b7589537be4f48137703dba57eec6a9a351b80029729c9255044d6cb0d5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708240131, "uuid": "a59d1c9d-a310-43cb-b9eb-0f6936935f88", "comment": "Malware payload (Mirai)", "value": "f05d33ce3847237080658b2366ec17e6a9e1663f", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708240131, "uuid": "ee587d31-7262-4257-a048-198221d97e8b", "comment": "Malware payload (Mirai)", "value": "c88e3b62216b6e50d164d607212b1f6fd8f0c070afb389d36916a4d3d145b9acb7c9cafb3a8ad02c9efe56312ac3b189", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708240131, "uuid": "aaaa2ba4-b440-4b74-b61f-b4f91fc3fe0f", "value": "T12E936DC5F743D4F1EC8301B15177EB368B33E0B92029EA42D3A99A31ED62951EA17B5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708240131, "uuid": "9c504274-4cf1-47bd-9aef-5b240b6be05f", "value": "1536:FUDeMR1KvdQO7lA+FU5/Z0AERr3NNX+Ln4kI/k2tWNsKfSaxaGJDf:FOX7KvCltZtE1TXwn4k6kMkza8Df", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708240131, "uuid": "82e45d1c-d766-4e41-871d-759577ec950d", "value": 96612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708240131, "uuid": "093607f4-70f0-47cd-bb97-948c041807e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708240131, "uuid": "6d57f021-cda6-4531-8341-8ddd2ba805da", "value": "most-x86-20240218-0708", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8106c2ab-ce37-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1708244827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708244827, "uuid": "16c6ee8c-9319-4b96-8b6a-8e6486bf4b04", "comment": "Malware payload (RiseProStealer)", "value": "b296376c4d19fa3a245a26fde7cc78d5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708244827, "uuid": "8b5d7d3f-e72e-4c7e-9a2f-a43c4802bbd7", "comment": "Malware payload (RiseProStealer)", "value": "f5550e94f417d68539f7b77ad71c4825b5f64c26aa17ca38a3bd65e0f94013ff", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708244827, "uuid": "eef8d263-bc4f-4750-855d-88e092f870ca", "comment": "Malware payload (RiseProStealer)", "value": "38e6fa587ecc3dc9dde0b5214563e973c0fbe3f9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708244827, "uuid": "959b2aca-3756-4451-a4e0-c721959aecc5", "comment": "Malware payload (RiseProStealer)", "value": "3b9b4247e14b6fce6dd295be3a6798bdcf5f170f0712fc2cd404768a2a417994a4308480c8cd631bde2835ae214ee73b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708244827, "uuid": "aecac190-6e4f-43f1-b936-1e096fa98211", "value": "T1901512CE6D444427D684723049C3FBB8071EECD1B896A0DD3CE9BF5B7A73A1A091296C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708244827, "uuid": "0878a3b7-cf3b-4177-94e2-0fac4bbc1abe", "value": "2388fee6ad8ce4f4a35dbaf64e2da01a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708244827, "uuid": "0d7b4881-039c-488a-9a59-2d0032f53b08", "value": "24576:R7VvyDDe8XBB9t5aKKSv/nE4W1eaiZr3QhZuxw:RVyu8rQevfEx1qr8Zux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708244827, "uuid": "0f2d6287-0826-4146-98d1-825f28de276f", "value": 921904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708244827, "uuid": "0df4a521-c0fe-4679-af9e-4bf602aad280", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708244827, "uuid": "40dfa228-71cd-485c-979a-2d530b545f69", "value": "SecuriteInfo.com.Trojan.GenericKDZ.105649.15764.2812", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e210c03-ce48-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Formbook)", "timestamp": 1708251990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708251990, "uuid": "e16ca809-a04d-4260-8637-78d63231294a", "comment": "Malware payload (Formbook)", "value": "d0b54047b4e7e283113ab512d979fa6d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708251990, "uuid": "304f8f30-5219-4aa8-80a7-d711fc7e8d26", "comment": "Malware payload (Formbook)", "value": "f73f985bf2f74cc1006a5e911bbd7940073809b01da2823a6bb1db85288c0926", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708251990, "uuid": "6ea95e60-8726-47e1-8efb-0e3dea2cdd15", "comment": "Malware payload (Formbook)", "value": "4333396278663f2b0b8136e8004d527cb7f61aa9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708251990, "uuid": "ccabd460-db91-46cb-8686-01796c7beb84", "comment": "Malware payload (Formbook)", "value": "67dc89b410537eebcc188c5c98d2e909e619529adad3abec712c6498b9eca8234d0119827b1e9ab215717705e9b740b2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708251990, "uuid": "e399eb63-e591-4a8a-8432-99230a61e869", "value": "T103F4CF4EA3600397F0182BB5DA6D3E150330187D75D1EBE4F9A9769BEEE1BA2543301B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708251990, "uuid": "08838091-0e53-4694-972c-fb5996e47ed5", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708251990, "uuid": "ad116426-23f6-4e42-a725-7a52c6dec932", "value": "12288:7sQ4W3blAUlReVkv7UErZKBCqY1Wi28x7VfhvtwrZmNF:7cAqmReizUErZRN1/xrhFKmj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708251990, "uuid": "50db6a4d-538b-431c-9abf-b269e5e9e20f", "value": 730112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708251990, "uuid": "f0a6e037-d7fe-4d5d-add5-a9be95749ba4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708251990, "uuid": "5af7fbaa-0d60-440f-8787-72a0bbfa71a7", "value": "SecuriteInfo.com.Trojan.Packed2.46253.12475.18755", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb576375-ceac-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708295203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295203, "uuid": "877dc9fa-8bd3-4af9-b6d7-2976fba25185", "comment": "Malware payload (Mirai)", "value": "895b4d6a3436ac428768fc52d123c537", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295203, "uuid": "bf0106b8-7958-486a-828e-2af57981b293", "comment": "Malware payload (Mirai)", "value": "f9c3f07c85309e15d8dee1b2ea352e627f2f573462f9e562c32ad4b9d3e62ea2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295203, "uuid": "46fbc282-b1a3-4dc7-8522-12549a4a4312", "comment": "Malware payload (Mirai)", "value": "7d8a507f240339a179cd9d20acb6b4ccd7e2b54e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708295203, "uuid": "491c1e52-ccf8-4dfc-8be7-4b067d323594", "comment": "Malware payload (Mirai)", "value": "752445abb41f07468898f3ca9e2a473c7a1115b17fc2b51c51ed8c1edeb04debb765a4df35c4053f78b80e1fdafb2ecd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295203, "uuid": "64b4d835-1268-46ec-a09e-539a11d830c1", "value": "T1C35307C16B43DEB7E81311F012F3AB364A32FC3A1836D982D7B5FCA69A415C1A51636C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295203, "uuid": "d545c372-0ec4-4a77-8b4d-49e698bdb7fa", "value": "1536:T3S1vp043ffFSXnelB3W0LtFMFZ1jvgDTsrbpOV9SU:LSRp0WfAelAAMFvviT2cj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708295203, "uuid": "86891176-c937-4e5d-b519-6e780127e10b", "value": 66276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708295203, "uuid": "ec85f672-35f3-48e1-ad19-52a292db6061", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708295203, "uuid": "86906e66-0274-4ead-b783-72a9e97b0219", "value": "895b4d6a3436ac428768fc52d123c537", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a68e77b0-ce3b-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1708246608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246608, "uuid": "795b3f29-d13d-4485-884f-7e3408012b57", "comment": "Malware payload (Mirai)", "value": "eb6d942c5f7647d7b96756fa7f90ba38", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246608, "uuid": "93c637d5-26d1-4e18-a15a-aa3b747923e5", "comment": "Malware payload (Mirai)", "value": "ff0183c83957c7e0a860cffd18d2f3898d261cce9f5d85b86eff22133d679aa6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246608, "uuid": "b1e5c957-c3bc-4b02-80ef-f1b3aeaad1a4", "comment": "Malware payload (Mirai)", "value": "d2df1287e2ee4d7726b2d71d47a166c4df24f74c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708246608, "uuid": "995e010d-362f-4ffb-9122-6de71cf8eb00", "comment": "Malware payload (Mirai)", "value": "42608cce0e76790091e970b502d1bc549ecf25cfd7c2d7e3fedb39da5c191bd6ec358cc79e5092ef79f71de437b9e71e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246608, "uuid": "92e8c1f4-ef92-4a21-97b2-4aaede32499c", "value": "T15B635C31BA362E13C0E1A47E61F78B11B5E217DE36A4C61A7E720E4AFF211506507EF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246608, "uuid": "eb40d8ca-4eb2-4e9c-a52d-a432d1d70959", "value": "1536:ngr3IAqziDiRQAaKqvOVk6PFIPAcZk6VIfiV0Rq:grDita9W5IPAeZVNP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708246608, "uuid": "05f0ac3f-8372-42f3-976a-c01bcb306a60", "value": 71912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708246608, "uuid": "486ab597-f214-4e77-add2-a996aec021fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708246608, "uuid": "3881083f-7d71-4fc2-a60c-0390ca95347b", "value": "eb6d942c5f7647d7b96756fa7f90ba38", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d77bbf4b-cdf7-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1708217485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1708217485, "uuid": "346013c2-e71b-4498-b3a8-df4908ffbed8", "comment": "Malware payload (RiseProStealer)", "value": "deff8d72daac5ae4e119ec9294c91438", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1708217485, "uuid": "e04780c8-f8dc-4047-9a0b-c82cc6954f78", "comment": "Malware payload (RiseProStealer)", "value": "ff715c1f8da954648371c6e73964f1cd9b7d1db00480e8af7ee9d815f99571c1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1708217485, "uuid": "28cd16ed-8300-4918-9500-71808ea8df3c", "comment": "Malware payload (RiseProStealer)", "value": "21143b1e3bcb1e25de9d1332e0ec838d52c83c93", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1708217485, "uuid": "62ad13ea-4196-41e1-8f96-5cbbb6a4f727", "comment": "Malware payload (RiseProStealer)", "value": "8bcce5cde646451c5a6cb52920efc78f229f7007a6c0a2bbc1a9a1f6b33f035b155bc3441cf073f85fbbcc3e334bc25c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1708217485, "uuid": "6bf64058-9dab-448d-a763-d0f060af082d", "value": "T16D1512CE6D8140A7E2983B7505C1F7BD422FEC80BD9690CDACDC7BA37636D2A192255C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1708217485, "uuid": "395b1418-74f6-40c9-9028-99cb038f65e7", "value": "2388fee6ad8ce4f4a35dbaf64e2da01a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1708217485, "uuid": "cb061588-212e-4b4d-ac6c-a7c70f7b7b2f", "value": "24576:8aZxtO/fZorYIqLkxpLXw1HY+IMrQ4yBu1O:8AxtOXarNqipLAaMrQzBu1O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1708217485, "uuid": "af6fa550-a5d6-4a2c-9019-8f5ed0659836", "value": 922064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1708217485, "uuid": "a7fa2b4a-3a9b-4bb6-9d1a-0f5cada9de56", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1708217485, "uuid": "85be7579-a719-4c84-926c-8bc1e9a77378", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }